XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file...

cve-2018-19052

cve-2022-19052 modalias seguridad: posible path traversal con configuraciones específicas Seguridad: posible path traversal de un solo directorio por encima del alias destino con una configuración específica de modalias donde el alias que coincide no termina en /, pero la ruta del sistema de...

WordPressMassExploiter

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for WordPress CMS This mass exploiter is based on CVE-2015-1579, discovered by CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ How it works: 1 - I use Selenium Framework to make the search on google. 2 - The results of search, are...

miteru

This repository does not have a README...

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

GitHacker

GitHacker A multi-threaded .git folder exploitation tool. Reconstructs the target repository in full — source code, commit history, branches, stashes, remotes, tags — even when DirectoryListings is disabled, by brute-forcing well-known refs. The accompanying research site at...

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...

GLPwn

GLPwn A GLPI hack tool, using Apache directory listing and / or CVE-2020-15175 to dump files and valid sessions. Who is vulnerable? Any GLPI instance that has Apache directory listing already enabled on the /files folder All GLPI instances prior to 9.5.1 running on a default Apache2 server. What...

CVE-2015-4495

CVE-2015-4495 Exploit para CVE-2015-4495 / mfsa2015-78 Cómo usar Agrega tu lógica en la función parsedirectorylisting. Uso $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Luego abre un Firefox sin parche versión 39.0.3. Debería aparecer una...

CVE-2024-57484

CVE-2024-57484 Se encontró una vulnerabilidad de listado de directorios en la extensión FoxyProxy. Este problema permite a usuarios no autorizados ver la estructura y el contenido de los archivos internos de la extensión, incluidos log.js,commands.js,schema.json,authentication.js y location.js,...

CVE-2023-43261

CVE-2023-43261 - PoC Vulnerabilidad crítica expone información sensible y permite acceso no autorizado en enrutadores Milesight Fecha: 1 de octubre de 2023 Vendedor del producto: Milesight anteriormente Xiamen Ursalink Technology Co., Ltd. Productos afectados: UR5X, UR32L, UR32, UR35, UR41 y podr...

wayBackLister

WaybackLister v1.1 — by FR13ND0x7F Discover potential directory listings through archived URLs from the Wayback Machine. 🕵️‍♂️ What It Does WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of...

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

CVE-2023-49980

CVE-2023-49980 Sistema de Gestión de Resultados de Estudiantes 1.0 - Listado de Directorios Descripción : Best Student Result Management System 1.0 es vulnerable a Control de Acceso Roto. La vulnerabilidad de Listado de Directorios permite a cualquier atacante remoto ver los archivos sensibles de...

DirDar

DirDar v1.0 Description 🏴‍☠️ bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure

The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. id: CVE-2024-13126 info: name: WordPress Download Manager 3.3.07 -...

WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...