cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

CVE-2026-19543

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

EUVD-2026-77761

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

CVE-2024-52302

CVE-2024-52302：常见用户管理中的无限制文件上传漏洞 概述 我在 common-user-management 中发现了一个关键的安全漏洞，这是一个稳健的 Spring Boot 应用程序，提供用于动态控制用户访问的用户管理服务。该漏洞影响 /api/v1/customer/profile-picture 端点，允许攻击者上传未经适当验证的文件，这可能导致远程代码执行（RCE） 。 漏洞利用代码 你可以使用以下 Python 脚本来利用此漏洞： root@kitploit: python exploit.py -u "customeruser" -p "yourpasswor...

urx

从 OSINT 归档中提取 URL，用于安全洞察。 Urx 是一款命令行工具，旨在从 OSINT 归档（如 Wayback Machine 和 Common Crawl）中收集 URL。基于 Rust 构建以实现高效，它利用异步处理快速查询多个数据源。该工具简化了为指定域名收集 URL 信息的过程，提供全面的数据集，可用于多种目的，包括安全测试和分析。 特性 从多个数据源并行获取 URL（Wayback Machine、Common Crawl、OTX、Arquivo.pt） 默认无密钥：Wayback、Common Crawl、OTX、Arquivo.pt 和 URLScan（匿名）均...

APT-Backpack

APT-バックパック APT、正当なRAT、および敵対者が使用するその他のツールで最もよく使われるCVE CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 未認証のファイル読み取り CVE-2019-19781 Citrix ADC & Gateway ディレクトリトラバーサル CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX 未認証のコマンドインジェクション CVE-2021-20090 Buffalo WSR-2533DHP2 WSR-2533DHP3...

Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

OpenCRE

OpenCRE 前往 https://www.opencre.org 查看 OpenCRE 的实际运行效果和更多说明。 OpenCRE 全称是 Open Common Requirement enumeration（开放通用需求枚举）。它是一个交互式内容链接平台，用于整合安全标准与指南。在设计、开发、测试和采购安全软件时，它能够提供简便而可靠的相关信息访问途径。 OpenCRE 包含： 应用程序：一个用于访问数据的 Python Web 和 CLI 应用程序，公开运行于 opencre.org 目录数据：通用需求（CRE）目录 映射数据：从每个 CRE 到一系列标准中相关章节的链接...

raptor_infiltrate20

raptorinfiltrate20 "Los bichos son, con diferencia, la clase de entidad más numerosa y exitosa." -- Enciclopedia de la vida animal Este repositorio contiene todos los materiales relacionados con mi charla "El efecto INFILTRATE: 6 bugs en 6 meses" presentada en INFILTRATE20 el 26 de enero de 2021...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

warcannon

WARCannon - 灾难级强大的并行WARC处理工具 WARCannon 旨在简化和降低“搜索互联网”这一过程的成本与复杂度。 通过 WARCannon，你可以： 构建并针对真实的 Common Crawl 数据测试正则表达式模式 轻松加载 Common Crawl 数据集以进行并行处理 扩展计算能力，以相当不合理的吞吐量异步处理 WARC 文件 存储并轻松检索结果 工作原理 WARCannon 巧妙利用 AWS 技术实现水平扩展至任意规模，通过竞价实例集群和同区域数据传输降低成本，以惊人速度（每节点高达 100Gbps）从 S3 拉取数据，跨数百个 CPU 核心并行处理，通过...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cifs: A use-after-free bug has been fixed in refreshcacheworker. The UAF bug occurred because we were putting DFS root sessions into cifsumount while the DFS cache refresher was executing. We have ensured that DFS root session...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Added a NULL check for the normallink string. It is not guaranteed that all entries of struct sofconnstream declare a normallink a non-SOF, direct link string. This applies to SoCs that only support SO...

OSSEM

オープンソースセキュリティイベントメタデータ OSSEM コミュニティ主導のプロジェクトで、主にセキュリティイベントログの文書化、標準化、モデリングに重点を置いています。 https://ossemproject.com/intro.html 目標 セキュリティイベントログのデータ標準化と変換を改善するための共通データモデルを定義・共有する セキュリティイベントログで特定されたデータ構造と関係性を定義・共有する コミュニティに対して、複数のセキュリティイベントログに関する詳細情報を辞書形式で提供する...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

robustbench

RobustBench：一个标准化的对抗鲁棒性基准 Francesco Croce（蒂宾根大学）、Maksym Andriushchenko（洛桑联邦理工学院）、Vikash Sehwag（普林斯顿大学）、Edoardo Debenedetti（洛桑联邦理工学院）、 Nicolas Flammarion（洛桑联邦理工学院）、Mung Chiang（普渡大学）、Prateek Mittal（普林斯顿大学）、Matthias Hein（蒂宾根大学） 排行榜 ：https://robustbench.github.io/ 论文： https://arxiv.org/abs/2010.09670...

gau

getallurls gau getallurls gau obtiene URLs conocidas de AlienVault's Open Threat Exchange, Wayback Machine, Common Crawl y URLScan para cualquier dominio dado. Inspirado en waybackurls de Tomnomnom. Recursos Uso Instalación Nota sobre ohmyzsh Uso: Ejemplos: root@kitploit: $ printf example.com | g...