sound4-directory-listing

Бейджи Лицензия MIT...

Swego

Swego Webserver multiuso in Golang. Semplice come il python SimpleHTTPServer ma con molte funzionalità Utilizzo Esegui il binario Se non vuoi compilarlo, i binari sono disponibili su https://github.com/nodauf/Swego/releases Altrimenti, build-essential deve essere installato e GOPATH configurato:...

BigBountyRecon

BigBountyRecon Das BigBountyRecon-Tool nutzt 58 verschiedene Techniken, darunter verschiedene Google Dorks und Open-Source-Tools, um den Prozess der ersten Aufklärung über die Zielorganisation zu beschleunigen. Die Aufklärung ist der wichtigste Schritt in jedem Penetrationstest oder...

DirDar

DirDar v1.0 Beschreibung 🏴‍☠️ verbotene Verzeichnisse umgehen - Verzeichnisauflistung finden und identifizieren - Sie können es auch als Verzeichnis-Brute-Forcer verwenden Kompatibilität Dieses Tool ist mit allen Betriebssystemen kompatibel, solange ein GO-Compiler installiert ist. Installation Sie...

CVE-2025-67160

CVE-2025-67160 — Câmeras IP baseadas em Vatilon Resumo O firmware de câmeras IP baseadas em Vatilon expõe múltiplos diretórios web internos sem exigir autenticação. Quando a indexação de diretórios está ativada no servidor web embarcado, atacantes não autenticados podem acessar diretórios como...

POC_CVE-2024-4322

CVE-2024-4322: LoLLMS WebUI PoC & Nuclei-Validierungslabor Dieses Repository stellt Docker-basierte lokale Laborumgebungen zur Reproduktion von CVE-2024-4322 bereit, einer Path-Traversal-Sicherheitslücke in LoLLMS WebUI v9.6, sowie zur Validierung, dass das zugehörige Nuclei-Template nicht auf...

CVE-2024-57484

CVE-2024-57484 FoxyProxy एक्सटेंशन में एक निर्देशिका सूचीकरण भेद्यता पाई गई। यह समस्या अनधिकृत उपयोगकर्ताओं को एक्सटेंशन की आंतरिक फ़ाइलों की संरचना और सामग्री देखने की अनुमति देती है, जिसमें log.js, commands.js, schema.json, authentication.js और location.js शामिल हैं, साथ ही उनकी अंतिम-संशोधित...

WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure

The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. id: CVE-2024-13126 info: name: WordPress Download Manager 3.3.07 -...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. id: CVE-2023-6592 info: name: WordPress FastDup = 2.1.9 Sensitive Information Exposure -...

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

CVE-2023-43261

CVE-2023-43261 - PoC Kritische Schwachstelle legt sensible Informationen offen und ermöglicht unbefugten Zugriff in Milesight-Routern Datum: 1. Oktober 2023 Anbieter des Produkts: Milesight ehemals Xiamen Ursalink Technology Co., Ltd. Betroffene Produkte: UR5X, UR32L, UR32, UR35, UR41 und es...

CVE-2015-4495

CVE-2015-4495 Exploit per CVE-2015-4495 / mfsa2015-78 Come usare Aggiungi la tua logica nella funzione parsedirectorylisting. Utilizzo root@kitploit: $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Poi apri un Firefox non patchato versione...

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Elenco delle directory Controllo degli accessi non corretto Panoramica issabel-pbx versione 4.0.0-6 contiene una vulnerabilità di Controllo degli accessi non corretto che si manifesta come Elenco delle directory non autenticato nell'interfaccia web. Qualsiasi...

XXEinjector

XXEinjector XXEinjector는 직접 및 대역 외 방식을 사용하여 파일 검색을 자동화합니다. 디렉터리 목록은 Java 애플리케이션에서만 작동합니다. 다른 애플리케이션의 경우 무차별 대입 방식을 사용해야 합니다. 옵션: root@kitploit: --host 필수 - 역방향 연결을 위한 우리의 IP 주소. --host=192.168.0.2 --file 필수 - XML이 포함된 유효한 HTTP 요청이 들어 있는 파일. DTD가 삽입되어야 할 지점을 "XXEINJECT"로 표시할 수도 있습니다...

wayBackLister

WaybackLister v1.1 — por FR13ND0x7F Descubra possíveis listagens de diretório através de URLs arquivadas pela Wayback Machine. 🕵️‍♂️ O Que Ele Faz O WaybackLister é uma ferramenta de reconhecimento que acessa a Wayback Machine para obter URLs históricas de um domínio, analisa caminhos únicos e...