evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Introduzione del progetto Questo progetto utilizza un modello linguistico di grandi dimensioni LLM accoppiato a un crawler per cercare su GitHub tutti i progetti che contengono informazioni preziose sulle vulnerabilità, POC o regole. Riconosce...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

shellshock_crawler

Voraussetzung 1. sudo pip install shell 2. google python search installieren. https://github.com/MarioVilas/google Ausführung Ich nutze Google, um die ersten 1000 Seiten zu durchsuchen und versuche, /etc/passwd zu erhalten. Nach dem Testen gibt es sehr viele viele viele Hosts, die gerootet werden...

xcrawl3r

xcrawl3r xcrawl3r è un'utilità da riga di comando progettata per esplorare ricorsivamente pagine web alla ricerca di URL. Funziona attraversando attivamente i siti web - seguendo i collegamenti incorporati nelle pagine web e analizzando file inclusi sitemap e robots.txt - per scoprire ogni URL. A...

INtrack

INtrack - Crawler Internet e Scanner di Sicurezza INtrack è un potente scanner di sicurezza e crawler internet multi-thread progettato per la ricognizione di rete, il rilevamento di vulnerabilità e la valutazione della sicurezza. Può scansionare un'ampia varietà di istanze, vulnerabilità,...

grubcrawler

Crawler web agentico con anti-rilevamento, fallback visivo e mesh peer-to-peer. Endpoint · Mesh · Anti-rilevamento · Ghost Protocol · Stream live · Strumenti MCP · Avvio rapido · Benchmark · Architettura Motore di crawling web full-stack con rendering JavaScript, browser anti-rilevamento Camoufox...

Lurkstrain

Lurkstrain Un crawler all-in-one per pannelli di amministrazione per pentester...

Bashter

Bashter 4.1 Framework Web Crawler, Scanner e Analizzatore basato su script Shell...

CVE-2026-76164

AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...

CVE-2026-76164 Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources

AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...

CVE-2026-76164 Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources

AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...

EUVD-2026-62366

AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...

CVE-2026-76164

CVE-2026-76164 is a non-blind SSRF in the AIL Framework crawler submission functionality. A low-privileged authenticated user can submit arbitrary URLs for crawling without adequate destination validation. Manual crawler tasks bypass the existing domain blacklist (assigned non-zero priority), and...

CVE-2026-53960 Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in the publicly-served Q&A QAPage JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engi...

EUVD-2026-54184

AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick handler used to display a stored screenshot, without context-appropriate encoding. An attacker who can cause a specially crafted URL to be...