40 matches found
osint-menace
OSINT Menace Consola de Reconocimiento de Código Abierto Creado para Cazadores, no para Navegadores. OSINT Menace es un proyecto de Pensamiento Defensivo. OSINT Menace es una aplicación web Python dockerizada para el triaje pasivo de OSINT impulsado por casos. Proporciona a los analistas una...
ThePhish
ThePhish ThePhish 是一款基于 TheHive、Cortex 和 MISP 的自动化钓鱼邮件分析工具。它是一个用 Python 3 编写、基于 Flask 的 Web 应用程序，能够自动完成从邮件头与正文中提取可观测指标，到最终（多数情况下）得出判定结果的完整分析流程。此外，它还允许分析人员在必要时介入分析过程，获取关于正在分析的邮件的更多详细信息。为了与 TheHive 和 Cortex 交互，它使用了 TheHive4py 和 Cortex4py，它们分别是访问 TheHive 和 Cortex 提供的 REST API 的 Python 客户端。 目录 概述...
RedDrop
RedDrop Exfil Server ¡Mira el artículo del blog de MaverisLabs que lo acompaña aquí! RedDrop Exfil Server es un servidor web Python Flask para probadores de penetración, equipos rojos y profesionales de seguridad que incluye: Carga de archivos Procesamiento automático de payloads Extracción...
malwinx
Malwinx Una aplicación web flask normal para aprender win32api con fragmentos de código y referencias. Requisito previo Necesitas descargar el siguiente paquete antes de iniciarlo root@kitploit: pip install flask pip install pefile pip install requests Uso root@kitploit: $ python flaskapp.py...
patch-checker
PatchChecker Questa è la base di codice per il servizio in esecuzione su: https://patchchecker.com. In breve, PatchChecker è un'applicazione web eseguita su Flask che fornisce un output simile a quello di Watson. Tuttavia, utilizzando PatchChecker, non è necessario eseguire un binario sulla...
WMD
WMD Massenvernichtungswaffe Dies ist ein Python-Tool mit einer Sammlung von IT-Sicherheitssoftware. Die Software ist in 'Modulen' gekapselt. Die Module bestehen aus reinem Python-Code und/oder externen Drittanbieterprogrammen. Hauptfunktionen 1. Um ein Modul zu verwenden, führen Sie den Befehl "u...
LOLBITS
root@kitploit: ██╗ ██████╗ ██╗ ██████╗ ██╗████████╗███████╗ ██║ ██╔═══██╗██║ ██╔══██╗██║╚══██╔══╝██╔════╝ ██║ ██║ ██║██║ ██████╔╝██║ ██║ ███████╗ ██║ ██║ ██║██║ ██╔══██╗██║ ██║ ╚════██║ ███████╗╚██████╔╝███████╗██████╔╝██║ ██║ ███████║ ╚══════╝ ╚═════╝ ╚══════╝╚═════╝ ╚═╝ ╚═╝ ╚══════╝ विषय सूची...
Vanna - SQL injection
Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...
URL_CHECKER
Controllo URL Phishing Uno strumento leggero basato sul web che rileva se un URL è probabilmente phishing o sicuro utilizzando un approccio ibrido di Machine Learning Random Forest/SVM e analisi euristica basata su regole. Realizzato a scopo educativo e per sperimentazione in cybersecurity e IA...
wavecrack
Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...
CVE-2026-71241
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
EUVD-2026-53314
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...
EUVD-2026-42077
Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE...
CLEANSTART-2026-FT24360 Flask is a web server gateway interface (WSGI) web application framework
Multiple security vulnerabilities affect the apache-superset package. Flask is a web server gateway interface WSGI web application framework. See references for individual vulnerability details...
📄 Keras 3.13.0 Malicious ML Model Server HDF5 Shape Bomb
This script is a Flask-based web server that distributes .keras machine learning model files, but it is designed in a malicious way for security research/testing scenarios. The main idea is a denial of service via memory exhaustion, where generated Keras models contain artificially declared...
Vulnerable-Web-App-Scanner
Vulnerable-Web-App-Scanner Pent...
Amazon Linux 2023 : python3-flask (ALAS2023-2026-1476)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1476 advisory. Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use o...
web-app-security-project
🛡️ Web Application Security Project 📌 Overview This projec...
PT-2026-21353
Name of the Vulnerable Software and Affected Versions Flask versions 3.1.2 and below Description Flask, a web server gateway interface WSGI web application framework, may improperly handle caching when accessing the session object. Specifically, it may fail to set the 'Vary: Cookie' header,...