temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

nali

Nali An offline tool for querying IP geographic information and CDN provider. 中文文档 Feature Multi database support Chunzhen qqip database ZX ipv6 database Geoip2 city database IPIP free database ip2region database DB-IP database IP2Location DB3 LITE database CDN provider query Pipeline support...

Vxscan

Vxscan 2.0 English | 简体中文 Python3 comprehensive scanning tool, mainly used for sensitive file detection directory scanning and js leak interface, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL...

metabigor

Metabigor - API 키 없이 사용하는 OSINT 파워 Metabigor란 무엇인가? Metabigor는 API 키를 하나도 등록하지 않고도 타겟의 인프라를 매핑합니다. 네트워크 범위, 인증서, 관련 도메인, 노출된 포트, CDN 벤더, 코드 유출까지 - 모든 것이 무료 소스에서 제공되며, 서로 파이프로 연결할 수 있습니다. 기능 네트워크 디스커버리 - ASN, 조직, 도메인 또는 IP에서 IP 범위CIDR 찾기 인증서 투명성Certificate Transparency - crt.sh를 통해 서브도메인 발견 IP...

CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: root@kitploit: - scripts and modules on the SheetJS CDN through version 0.19.2...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno root@kitploit: $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! root@kitploit: $ deno run --allow-run --allow-net check.ts https://example.com/...

subdomain3

Subdomain3 README.md는Chinese 中文에서 확인할 수 있습니다. 설명 Subdomain3는 차세대 도구로, 침투 테스터가 다른 도구보다 더 짧은 시간에 더 많은 정보를 발견할 수 있도록 도와줍니다. 이 정보에는 서브도메인, IP, CDN 등이 포함됩니다. 마음껏 사용해 보세요. 스크린샷 속도에 대한 중간 패턴 기능 더 빠름 속도를 위한 세 가지 패턴. 사용자는 설정 파일lib/config.py을 수정하여 속도를 높일 수 있습니다. CDN 지원 서브도메인이 CDN을 사용하는지 자동으로 판별하며, CDN 서버 사...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

CVE-2025-27415-PoC

CVE-2025-27415 PoC Nuxt3 cache poisoning A repository for setting up the cache poisoning vulnerability environment that occurs in nuxt3 =3.0.0 3.16.0 Vulnerability Summary When a CDN is placed in front of a Nuxt server, and the CDN only stores the path excluding URL queries as the cache key, a...

CloudFlair

CloudFlair Important note: As of late 2024, Censys does not provide API access to free accounts anymore. This means CloudFlair does not work with free Censys accounts anymore. CloudFlair is a tool to find origin servers of websites protected by CloudFlare or CloudFront which are publicly exposed...

bucky

프로젝트가 일시 중단되었습니다. Bucky Bucky는 S3 버킷의 잘못된 설정을 발견하도록 설계된 자동 도구입니다. Bucky는 두 개의 모듈Bucky Firefox 애드온과 Bucky 백엔드 엔진로 구성됩니다. Bucky 애드온은 웹페이지의 소스 코드를 읽고 정규 표현식Regex을 사용하여 CDNContent Delivery Network으로 사용되는 S3 버킷을 매칭한 후, 이를 Bucky 백엔드 엔진으로 전송합니다. 백엔드 엔진은 애드온으로부터 데이터를 받아 S3 버킷이 공개적으로 쓰기 가능한지 여부를 확인합니다. 버킷...

Abused-Legitimate-Services

被滥用的合法服务 合法的第三方平台即服务（PaaS）提供商正越来越多地被威胁行为者利用来开展钓鱼攻击和恶意软件部署。诸如云实例、营销平台、内容分发网络（CDN）和动态 DNS 服务器等 PaaS 提供商已被武器化，用于一系列恶意活动。其中一个关键优势是，它们可用于规避检测系统。这是因为这些服务被预先屏蔽的可能性较低，因为其具有已建立的信任级别和合法使用背景。 博客中的详细分析请见：https://blog.bushidotoken.net/2021/11/leveraging-legitimate-services-for.html 恶意软件活动滥用的合法服务 钓鱼活动滥用的合法服务...

CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Author: Byte Reaper Description CVE-2025-59342 is a path traversal vulnerability in esm.sh, a nobuild content delivery network CDN for modern web development, in version 136 and earlier. The issue exists in the handling of the X-Zone-Id HTTP header, which i...

AntiCropalypse

2023年3月31日更新 本日より、DiscordのCDNはPNGの転送中に末尾のデータを除去するようになりました。そのため、古いアップロードもaCropalypseの脆弱性から安全になりました。したがって、このボットはもはや必要ありませんが、ユーザーがアーカイブ画像をダウンロードできるよう、オンラインのまま維持されます。 ボットの元のREADMEは以下にあります。 AntiCropalypse...

CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x Mass Urls Scanner The polyfill.io CDN, previously compromised to serve malicious code, has now been secured with the latest fix in pdoc 14.5.1. Overview Detect potential issues Automate repetitive tasks with ease Features High Confidence Alerts : Detects scrip...

CVE-2026-77360 oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/cors.ts copies a client's incoming Vary request header into the response instead of controlling Vary as a response-only...

cdncheck

cdncheck 機能 • インストール • 使い方 • Discordに参加 root@kitploit: cdncheckは、DNS/IPネットワークアドレスに関連するテクノロジーを識別するためのツールです。 機能 CDN 、CLOUD 、WAF の検出 ライブラリとして簡単に使用可能 拡張可能なプロバイダ IP、DNS入力のサポート テキスト、JSONL出力 出力のフィルタリング インストール cdncheck のインストールにはgo1.19 が必要です。以下のコマンドを実行して最新バージョンをインストールしてください: root@kitploit: go install -v...

CVE-2026-59903

A flaw was found in Netty, an asynchronous, event-driven network application framework. The CorsHandler component incorrectly replaces application Vary headers, such as Authorization or Cookie, with Origin. This allows a caching proxy or Content Delivery Network CDN to reuse authenticated respons...

CVE-2026-59286

The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page. Spring for GraphQL 2.0.0 - 2.0.4 Spring...