IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & Still Giving... Latest presentation: Beyond Microsoft IIS Short File Name Disclosure Latest blog post: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ I recommended everyone to try @bitquark'...

PasteMonitor

PasteMonitor Scrape Pastebin API to collect daily pastes, setup a wordlist and be alerted by email when you have a match. Description The PasteMonitor tool allows you to perform two main actions for educational purposes only: Download daily new public pastes Average number of pastes per day:...

Jquery-File-Tree-1.6.6-Path-Traversal

Jquery-File-Tree-1.6.6-Path-Traversal Jquery File Tree 1.6.6 路径遍历漏洞利用（CVE-2017-1000170） WordPress 的 jQueryFileTree 这将在 victim.com/backup/admin 及其子路径中搜索所有 .zip 和 .sql 文件 （必须提供点号以指示它是扩展名） xpljqueryFileTree.php -u victim.com -f .log,idrsa -a -r | - 这将在服务器的所有文件夹中搜索所有名为 "idrsa" 或扩展名为 ".log" 的文件，...

CVE-2020-14181

CVE-2020-14181 Poc for CVE-2020-14181 Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive...

CVE-2020-10560

CVE-2020-10560 CVE-2020-10560 OSSN任意文件读取 关于如何使用此仓库的详细信息，请参阅 https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read 开始 docker-compose up --build 安装 镜像运行后，您可以通过127.0.0.1或10.2.0.101访问安装页面。 如果您想使用BURP，请不要安装在127.0.0.1上，否则URL重定向会出现问题。 在安装页面填写所有详细信息。您可以阅读或编辑compose文件以获取凭据。 DB: ossn usernam...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Nuclei Template: CVE-2022-1598.yaml VIDEO POC:...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414 概念验证 在 pki-core 中发现了一个缺陷。解析 XML 文档时访问外部实体可能导致 XML 外部实体（XXE）攻击。此缺陷允许远程攻击者通过发送特制的 HTTP 请求潜在地检索任意文件的内容。 参考资料： https://nvd.nist.gov/vuln/detail/CVE-2022-2414 https://access.redhat.com/security/cve/CVE-2022-2414...

CVE-2020-8193

Citrix ADC Vulns CVE List https://support.citrix.com/article/CTX276688 Add if while Code https://dmaasland.github.io/posts/citrix.html root@kitploit: responsestr = json.dumpsr.headers.dict'store' if r.statuscode == 406 and "Content-Disposition" in responsestr and r.headers"Accept-Ranges" == "byte...

CVE-2026-53786

A flaw was found in rsync. This vulnerability allows authenticated clients to bypass module-level filter restrictions. By supplying malicious merge file directives, an attacker can inject rules that override the daemon's intended file exclusion policies. This leads to information disclosure, as...

CVE-2019-11510-1

CVE-2019-11510-1 Exploit para lectura arbitraria de archivos en Pulse Secure SSL VPN CVE-2019-11510 uso de python: python CVE-2019-11510.py https://x.x.x.x Enlaces de referencia: https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

bfac

BFAC Webアプリケーション向け高度なバックアップファイルアーティファクトテスト BFAC（Backup File Artifacts Checker）は、Webアプリケーションのソースコードを露呈する可能性のあるバックアップアーティファクトをチェックする自動化ツールです。これらのアーティファクトは、パスワードやディレクトリ構造などの機密情報の漏洩につながる可能性もあります。 BFACの目標は、バックアップファイルアーティファクトのブラックボックステストのための オールインワンツール となることです。 Features マルチスレッドスキャン。 リクエストレート制限機能を含む。...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2020-25078

D-Link DCS系列账号密码信息泄露漏洞 D-Link DCS系列账号密码信息泄露漏洞，通过脚本获取账号密码登录。 漏洞编号 CVE-2020-25078 工具利用 python3 CVE-2020-25078.py -u http://127.0.0.1:1111 单个url测试 python3 CVE-2020-25078.py -f url.txt 批量检测 免责声明 由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。...

POC_CVE-2026-42880

CVE-2026-42880 — 通过 ServerSideDiff 泄露 ArgoCD Secret 一个用于复现和检测 CVE-2026-42880 的实验室环境。该漏洞是 Argo CD 中的一个严重漏洞，其 ServerSideDiff gRPC 处理器会将 Kubernetes Secret 数据暴露给只读用户。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-42880 GHSA| GHSA-3v3m-wc6v-x4x3 CVSS| 9.6（严重） — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 受影响版本| ArgoCD...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: root@kitploit: pip install -r requirements.txt Single Target: root@kitploit: python CVE-2024-7928.py -u https://target:9090 Bulk...

SpringBootVulExploit

Spring Boot Vulnerability Exploit Check List Collection of Spring Boot related vulnerability learning materials, exploitation methods and techniques, black-box security assessment check list Statement ⚠️ All content in this project is only for security research and authorized testing. Those who...

ImageMagick-lfi-poc

ImageMagick-lfi-poc ImageMagick Arbitrary Read Files - CVE-2022-44268 also used in htb pilgrimage ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for...

DVR_Sploit

DVRSploit 用于自动化 CVE-2018-9995 的简单 python3 脚本 依赖项：requests pip install requests 用法： root@fuckmachine: python3 dvrsploit.py 输入 DVR 主机：192.168.69.69 输入 DVR 端口：88 设备列表：...

CVE-2026-84173

Eclipse Ankaios versions v0.5.1 through v1.0.1 contain an authorization flaw in the agent-side Control Interface authorizer . When a multi-segment allow rule begins with a wildcard (e.g., *.workloads.some_workload), an authenticated workload can submit a CompleteStateRequest or UpdateStateRequest...