12 matches found
Web-Cache-Vulnerability-Scanner
Web Cache Vulnerability Scanner WCVS는 Hackmanit과 Maximilian Hildebrand가 개발한 웹 캐시 포이즈닝 및 웹 캐시 디셉션을 위한 빠르고 다재다능한 CLI 스캐너입니다. 이 스캐너는 다양한 웹 캐시 포이즈닝 및 웹 캐시 디셉션 기법을 지원하며, 추가로 테스트할 URL을 식별하기 위한 크롤러를 포함하고, 특정 웹 캐시에 적응하여 더 효율적인 테스트를 수행할 수 있습니다. 또한 높은 사용자 정의가 가능하며 기존 CI/CD 파이프라인에 쉽게 통합될 수 있습니다. 기능 설치 옵션 1:...
react2shell-scanner
react2shell-scanner React Server Componentsを使用するNext.jsアプリケーションにおけるCVE-2025-55182およびCVE-2025-66478を検出するためのコマンドラインツールです。 脆弱性と検出方法の技術的詳細については、ブログ記事を参照してください: https://slcyber.io/research-center/high-fidelity-detection-mechanism-for-rsc-next-js-rce-cve-2025-55182-cve-2025-66478 仕組み...
kyubisweep
🦊 KyubiSweep 露出したシークレットを狐の狡猾さで狩り出せ！ 軽量でクロスプラットフォームなCLIツール。ファイルシステムをスキャンして、露出したシークレット、APIキー、トークンを検出します。Goで構築され、最大のパフォーマンスとゼロ依存性を実現。 ✨ 機能 🔍 30以上のシークレットパターン - AWS、Stripe、GitHub、Google、Slack、データベース認証情報などを検出 🧮 シャノンエントロピー分析 - 正規表現では見逃しがちな高エントロピー文字列をキャッチ ⚡ 並列スキャン - Goのgoroutineを使用した高速並列処理 🛡️...
dotenv-diff
dotenv-diff コードベースをスキャンして、すべての環境変数参照を検出します。欠落、未使用、重複、誤用された変数を、ランタイムエラーを引き起こす前に早期に発見するのに役立ちます。 SvelteKit、Next.js、Nuxt をファーストクラスでサポートします。また、Node.js や Vue などの最新の JavaScript/TypeScript プロジェクトやフレームワーク、あるいは信頼性の高い .env ファイル比較を必要とするその他のセットアップでも問題なく動作します。 ✨awesome-cli-apps で紹介されました - 厳選された素晴らしい CLI...
NextJS-Exploit-
NextSploit: Next.js CVE-2025-29927 スキャナー＆エクスプロイター NextSploit は、Next.js のセキュリティ上の欠陥である CVE-2025-29927 を検出・悪用するために設計されたコマンドラインツールです。このツールはまず、対象のウェブサイトが Next.js で動作しているかを特定し、そのバージョンが脆弱な範囲に該当するかを判定します。ウェブサイトが脆弱であると確認された場合、ツールは ミドルウェアによる保護をバイパスして悪用を自動的に試行 し、制限されたページへの不正アクセスを引き起こす可能性があります。 特徴 Next.js...
preflight v0.20.1
Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...
Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)
Did you know were running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure! Last week, there were 304 vulnerabilities disclosed in 232 WordPres...
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 29, 2024 to February 4, 2024)
Did you know were running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through February 29th, 2024 when you opt to have Wordfence handle responsible disclosure! Last week, there were 122 vulnerabilities disclosed in 110...
Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)
Wordfence just launched its bug bounty program. For the first 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Over the last two weeks, there were 263 vulnerabilities disclosed in 217 WordPress Plugins and 3 WordPress themes that have been added to the...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 20, 2023 to November 26, 2023)
Wordfence just launched its bug bounty program. For the first 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Last week, there were 115 vulnerabilities disclosed in 87 WordPress Plugins and 1 WordPress themes that have been added to the Wordfence...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 13, 2023 to November 19, 2023)
Wordfence just launched its bug bounty program. For the first 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Last week, there were 126 vulnerabilities disclosed in 102 WordPress Plugins and 2 WordPress themes that have been added to the Wordfence...
