34 matches found
DomainFrontDiscover
DomainFrontDiscover ドメインフロンティング可能なCloudFrontドメインを見つけるためのスクリプトと結果 ここで行われたことのウォークスルーは https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains にあります。 ConfirmedFrontableDomains.txt CloudFrontを介したドメインフロンティングで動作することが確認された93,000以上のドメインのリスト（2018年2月22日時点）。...
feroxbuster
!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...
Inventus
Inventus Inventus 是一个爬虫，旨在通过爬取特定域名及其发现的任何子域名来查找子域名。它是一个 Scrapy 爬虫，意味着它易于修改和扩展以满足您的需求。 演示 asciicast 环境要求 Linux —— 我尚未在 Windows 上测试过。 Python 2.7 或 Python 3.3+ Scrapy 1.4.0 或更高版本。 安装 运行 Inventus 前需要安装 Scrapy。首先，克隆仓库并进入目录。 root@kitploit: $ git clone https://github.com/nmalcolm/Inventus $ cd Inventus...
xsssniper
XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...
admin-panel-finder
admin-panel-finder Un script en Python para encontrar el panel de administración de un sitio...
CVE-2025-15467
CVE-2025-15467 strumento di discovery powershell...
juicy-php
juicy-php Juicy-php - PHP info फ़ाइलें ढूंढता है जिनमें रोचक जानकारी होती है...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
Android ADB Wireless Network Flipper Zero Recon Scanner / Service Discovery
This is a reconnaissance scanner and discovery tool for Flipper Zero to look for Android ADB wireless networks...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
CVE-2026-44661
python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registermanual validates the discovery URL against an HTTPS /...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
CVE-2013-10073
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary...
EUVD-2013-7287
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary...
CVE-2013-10073
Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-controlled input is passed to a shell without adequate sanitation or argument quoting, allowing an authenticated user with access to discovery functionality to execute arbitrary...
PT-2025-44535
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2012R1.6 Description Nagios XI versions prior to 2012R1.6 contain a shell command injection issue in the Auto-Discovery tool. User-controlled input is passed to a shell without proper sanitization or argument quotin...
gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask
A flaw was found in the GStreamer library. An out-of-bounds read in the gst-discoverer-1.0 command line tool can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash. This issue only affects the gst-discoverer-1.0 command line tool an...
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: CVE-2024-47538: Fixed a stack-buffer overflow in vorbishandleidentificationpacket. bsc1234415 CVE-2024-47835: Fixed a NULL-pointer dereference in LRC subtitle parser. bsc1234450 CVE-2024-47600: Fixed an out-of-bounds read in...
Avahi security breach
Avahi is a set of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from an assertion failure in the dbussethostname function...
Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery
This past January, a SaaS Security Posture Management SSPM company named Wing Security Wing made waves with the launch of its free SaaS-Shadow IT discovery solution. Cloud-based companies were invited to gain insight into their employees' SaaS usage through a completely free, self-service product...