973229 matches found
Injectus
Injectus Semplice strumento Python che scorre una lista di URL provando payload CRLF e open redirect. root@kitploit: ▪ ▐ ▄ ▐▄▄▄▄▄▄ . ▄▄· ▄▄▄▄▄▄• ▄▌.▄▄ · ██ •█▌▐█ ·██▀▄.▀·▐█ ▌▪•██ █▪██▌▐█ ▀. ▐█·▐█▐▐▌▪▄ ██▐▀▀▪▄██ ▄▄ ▐█.▪█▌▐█▌▄▀▀▀█▄ ▐█▌██▐█▌▐▌▐█▌▐█▄▄▌▐███▌ ▐█▌·▐█▄█▌▐█▄▪▐█ ▀▀▀▀▀ █▪ ▀▀▀• ▀▀▀ ·▀▀▀ ▀▀▀...
bug-bounty-domains
DOMINI PER BUG BOUNTY Domini appartenenti ai programmi di bug bounty pubblici più rinomati. NON PER PROGRAMMI NON MONETARI O PRIVATI !https://assets.kitploit.com/production/public/readmes/6941/7164554a880fd0545e5dc196593b59979d6603d...
CVE-2021-30573
CVE-2021-30573-PoC-Google-Chrome Google Chrome Use After Free Schwachstelle gemeldet Gesamte Bug Bounty Belohnung: $6.000 Dies ist der Proof of Concept für: Google SecuritySeverity CVE. HOCH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google Blogbeitrag:...
tbhm
The Bug Hunter's Methodology TBHM Willkommen! Dieses Repo ist eine Sammlung von Tipps Tricks Werkzeuge Datenanalyse und Notizen bezogen auf Sicherheitsbewertungen von Webanwendungen und insbesondere auf Bug Hunting im Rahmen von Bug-Bounty-Programmen. Die aktuellen Abschnitte sind wie folgt...
bug-bounty-tools
Bug-Bounty-Skript Ein BASH-Skript zur Automatisierung der Installation der beliebtesten Bug-Bounty-Tools; der Hauptzweck dieses Skripts besteht darin, es auf temporären/wegwerfbaren virtuellen Maschinen in der Cloud auszuführen. Verwendete Tools Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox...
claude-bug-bounty
BugHunter AI-संचालित बग बाउंटी हंटिंग — recon से रिपोर्ट तक, आपके टर्मिनल में। मुफ़्त सेटअप · त्वरित प्रारंभ · कमांड · यह क्या खोजता है · इंस्टॉल · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa3...
vuke
vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...
SubMon
SubMon Manche sagen, Bug Bounty geht nicht nur darum, Bugs zu finden, sondern der „Erste“ zu sein, der sie findet. Ich baue dieses Tool, um Jäger zu benachrichtigen, wenn neue Subdomains auftauchen. Funktionen Du kannst dein Lieblingsziel hinzufügen: Name + Domain. Dann kannst du entweder auf sca...
bug-reaper
BugReaper Strukturierte Web2-Bug-Bounty-KI-Fähigkeit – 18 Schwachstellenklassen, 4 Bug-Bounty-Plattformen, null KI-Schrott. Kompatibel mit OpenClaw, Cursor, Claude Code, Antigravity und Windsurf. BugReaper ist eine Agent Skill, die jeden kompatiblen KI-Agenten in einen disziplinierten...
CVE-2025-55182-Simple-Scanner-main
CVE-2025-55182: Scanner RCE per React Server Components Un toolkit completo per rilevare e sfruttare la CVE-2025-55182 , una vulnerabilità critica di Remote Code Execution nelle applicazioni Next.js che utilizzano React Server Components. Questo repository include uno scanner Bash unificato...
FavFreak
FavFreak - Armare favicon.ico per BugBounties, OSINT e quant'altro Una descrizione dettagliata è disponibile qui: Leggi il blog qui: https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introduzione Ho creato questo strumento per rendere il mio lavo...
claude-bug-bounty
BugHunter صيد مكافآت الاختراق مدعوم بالذكاء الاصطناعي — من الاستطلاع إلى التقرير، داخل جهازك الطرفي. إعداد مجاني · بدء سريع · الأوامر · ما يجده · التثبيت · الأسئلة الشائعة !BUGHUNTER — خط أنابيب أتمتة مكافآت...
CVE-2026-21580
Confluence Data Center and Server versions 7.1.1 through 10.2.0 are affected by a Critical (CVSS 9.3) Stored XSS, privilege escalation, and security misconfiguration issue exploitable by unauthenticated attackers. Atlassian recommends upgrading to 9.2.21 or 10.2.13 or later; no in-the-wild exploi...
PT-2026-78242
Name of the Vulnerable Software and Affected Versions Confluence Data Center and Server versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 Description A stored Cross-Site Scripting XSS, privilege escalation, and...
MINI-JMRW-2WQF-55G5
Bulletin has no description...
Users with Overall/Manage permission can instantiate any types related to configuration
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration. This allows attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those...
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, including those...
EUVD-2026-46328
This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to execute arbitrary code which has high impact to...
CVE-2026-21575
The CVE-2026-21575 entry concerns Sourcetree for Mac and Sourcetree for Windows, introduced in version 3.4.11. It is a High severity remote code execution (RCE) vulnerability that an authenticated attacker can exploit to execute arbitrary code with high impact to confidentiality, integrity, and a...
