Azure-Sentinel

Microsoft Sentinel y Microsoft 365 Defender Bienvenido al repositorio unificado de Microsoft Sentinel y Microsoft 365 Defender. Este repositorio contiene detecciones listas para usar, consultas de exploración, consultas de búsqueda, libros, runbooks y mucho más para ayudarte a ponerte al día con...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Safari gives ad blockers very little room. Each content blocker gets 150,000 rules and can't touch a page's JavaScript. wBlock ships five of them 750,000 rules plus a...

OpenCRE

OpenCRE Go to https://www.opencre.org to see OpenCRE working and more explanation. OpenCRE stands for Open Common Requirement enumeration. It is an interactive content linking platform for uniting security standards and guidelines. It offers easy and robust access to relevant information when...

skyhook

Skyhook Skyhook es una utilidad basada en REST que se usa para introducir y extraer archivos de redes protegidas por implementaciones de IDS. Viene con un cliente web preempaquetado que utiliza una combinación de React, vanilla JS y WebAssembly para gestionar transferencias de archivos. Enlaces...

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

pyWhat

➡️ Discord ⬅️ La forma más sencilla de identificar cualquier cosa pip3 install pywhat && pywhat --help 🤔 ¿Qué es esto? Imagina esto: te encuentras con un texto misterioso 🧙‍♂️ 0x52908400098527886E0F7030069857D2E4169EE7 o dQw4w9WgXcQ y te preguntas qué es. ¿Qué haces? Bueno, con what todo lo que...

CSPBypass

CSP Bypass Welcome to CSPBypass.com , a tool designed to help ethical hackers bypass restrictive Content Security Policies CSP and exploit XSS Cross-Site Scripting vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains. Website Visit CSPBypass.co...

CMSeeK

¿Qué es un CMS? Un sistema de gestión de contenidos CMS administra la creación y modificación de contenido digital. Normalmente admite múltiples usuarios en un entorno colaborativo. Algunos ejemplos notables son: WordPress, Joomla, Drupal, etc. Historial de versiones - Versión 1.1.3 25-07-2020 -...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Descripción El plugin Insert or Embed Articulate Content into WordPress para WordPress es vulnerable a subidas arbitrarias de archivos a través de subidas inseguras de archivos en un archivo zip en todas las versiones hasta, e incluyendo, la 4.3000000023. Esto permite que...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

kiterunner

Kiterunner Introducción Durante mucho tiempo, el descubrimiento de contenido se ha centrado en encontrar archivos y carpetas. Si bien este enfoque es efectivo para servidores web heredados que alojan archivos estáticos o responden con 3xx ante una ruta parcial, ya no es efectivo para aplicaciones...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

wp-ulike-cve-2025-32259-poc

WP ULike ≤ 4.7.9.1 - Unauthenticated Content Spoof CVE-2025-32259 🔬 A simple PoC demonstrating CVE-2025-32259 in the WP ULike plugin for WordPress. 🚨 Educational use only – do not test on systems without explicit authorization. 🧠 Overview WP ULike is a popular WordPress plugin that allows users t...

citrixmash_scanner

CVE-2019-19781 citrixmash scanner A multithreaded scanner for Citrix appliances that are vulnerable to CVE-2019-19781. The scanner does not attempt to compromise/exploit hosts and avoids downloading any sensitive content. A HEAD request is used to determine if a target is vulnerable. False...

Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC ¡El sieve renace! Damn Vulnerable Android Components DVAC es una aplicación educativa para Android diseñada intencionalmente para exponer y demostrar vulnerabilidades relacionadas con varios componentes de Android, como Activities, Intents, Content...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2024-37791

CVE-2024-37791 CVE-2024-37791 Project address: Preparatory work: Log in to the backend - get cookie Vulnerability URL: http://127.0.0.1:8093/s/article/Content/index?classid=&keyword= Vulnerability parameter: keyword payload: %27andselectfromselect+ifasciisubstrdatabase,1,1%3E97,sleep1,0a//union/...