336931 matches found
Scrapegraph-ai
🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...
CVE-2018-3252
CVE-2018-3252 1. Decompile WebLogic root@kitploit: private void handleDataTransferRequestHttpServletRequest paramHttpServletRequest, HttpServletResponse paramHttpServletResponse, AuthenticatedSubject paramAuthenticatedSubject throws IOException if isDebugEnabled debug"Received DataTransferRequest...
seekr
Un conjunto de herramientas multiuso para recopilar y gestionar datos OSINT con una elegante interfaz web. Introducción Seekr es un conjunto de herramientas multiuso para recopilar y gestionar datos OSINT con una elegante interfaz web. Nuestra vista de escritorio te permite tener todas tus...
seekr
A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...
tweetable-polyglot-png
tweetable-polyglot-png Empaqueta hasta 3MB de datos en un archivo PNG poliglota tweeteable. Véalo en acción aquí: https://twitter.com/David3141593/status/1371974874856587268 Otros hosts de imágenes en los que he verificado que esta técnica funciona: Imgur https://i.imgur.com/kNhGrN3.png Github re...
CVE-2026-97149
In OpenStack Swift versions before 2.38.2 , a vulnerability exists because the tempurl middleware fails to reject the X-Copy-From header on PUT requests. Since the TempURL signature only validates the method, expiry, and path, an attacker with a valid PUT TempURL for a single object can include a...
EUVD-2026-85786
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disallowed headers is the only defense against a signed PUT request changing what the request does. A...
Photon
Photon Incredibly fast crawler designed for OSINT. Photon Wiki • How To Use • Compatibility • Photon Library • Contribution • Roadmap Key Features Data Extraction Photon can extract the following data while crawling: URLs in-scope & out-of-scope URLs with parameters example.com/gallery.php?id=2...
kernel: mac802154: llsec: add skb_cow_data() before in-place crypto
A flaw was found in the Linux kernel's mac802154 IEEE 802.15.4 MAC security component. This vulnerability allows for data corruption and potential kernel crashes when cryptographic transformations are performed on shared network packet data without proper isolation. A remote attacker could exploi...
gundog
gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...
pentest-a2p2v-core
LÉAME Automated Attack Path Planning and Validation A2P2V es una herramienta de planificación y ciberataque que proporciona la capacidad a los usuarios de determinar un conjunto de secuencias de ataque clasificadas dado un objetivo específico del atacante. El objetivo de la herramienta es...
HackBrowserData
HackBrowserData HackBrowserData es una herramienta de línea de comandos para descifrar y exportar datos del navegador contraseñas, historial, cookies, marcadores, tarjetas de crédito, historial de descargas, localStorage, sessionStorage y extensiones desde el navegador. Es compatible con los...
blue-pigeon
Blue Pigeon: Herramienta de Exfiltración de Datos y Proxy basada en Bluetooth para Red Teamers 1. La Motivación | El Nacimiento del Pájaro ¿Cómo funciona Blue Pigeon? Requisitos Clave del Pigeon 2. Los Componentes | Diseccionando al Pidgey 1. Blue Pigeon - La Aplicación Móvil 2. Blue Beak...
evine
Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...
evine
Evine Web Crawler CLI interactivo. Evine es un web crawler y web scraper simple, rápido e interactivo escrito en Golang. Evine es útil para una amplia gama de propósitos, como extracción de metadatos y datos, minería de datos, reconocimiento y pruebas. Si te gusta el proyecto, dale una estrella...
MalQR.github.io
MalQR Acerca de MalQR es una colección de códigos QR y códigos de barras maliciosos que puedes usar para probar la seguridad de tus escáneres. Te proporciona la capacidad de realizar dichas pruebas con facilidad : solo necesitas tener un smartphone, una tableta o un portátil con conexión a intern...
ST3GG
root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ EL MEJOR KIT DE ESTEGANOGRAFÍA ✧•-•⊱ Oculta...
Powertek Firmware <3.30.30 - Authorization Bypass
Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...
AntD Admin - Sensitive Information Disclosure
AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...
Online Fire Reporting System v1.0 - SQL injection
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=. id: CVE-2022-31975 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...