Awesome-FOFA

Awesome-FOFA Library 📒 中文 README Get Started with FOFA A Beginner’s Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...

fofa_viewer

FofaViewer 🔗 中文 | EN Introduction Fofa Viewer is a user-friendly FOFA client written in JavaFX, attributed to the WgpSec Community and primarily maintained by f1ashine. By leveraging the powerful internet search engine FoFa, it encapsulates many commonly used APIs into a concise UI, making it...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

CVE-2024-24919

CVE-2024-24919 I'm not responsible for anything : Instalation git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 FOFA Query title="Check Point SSL Network Extender"...

CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites Fofa membership, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...

awesome-search-queries

Awesome Search Queries Community curated list of search queries for various categories across multiple search engines. Welcome to Awesome Search Queries, a community-driven project to create an index of search queries for various categories across multiple search engines. This project is inspired...

CVE-2021-45232

Apache APISIX Dashboard Unauthorized Access Description This tool integrates fofa and POC one-click detection functionality, enabling one-click crawling from fofa and one-click detection crawl and test simultaneously Usage Version: python3 Before testing, you need to change your fofatoken value a...

CVE-2024-24919

CVE-2024-24919 Exploit script for CVE-2024-24919. Shodan: "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" FOFA: title="Check Point SSL Network Extender" I am not responsible for any misuse or damage caused by this script...

CVE-2025-30208-EXP

CVE-2025-30208-EXP Vite development server arbitrary file read vulnerability CVE-2025-30208, with wide coverage, simple exploitation, and no restrictions, posing a huge threat! Fofa search syntax: body="/@vite/client" Hunter search syntax: web.body="/@vite/client" Exp script usage -u to check -p...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read Vulnerability fofa Batch POC Disclaimer This POC is only used to detect whether the target has the vulnerability. It is strictly forbidden to be used in any unauthorized testing. The author assumes no responsibility. Usage Fill in the email and key of a...

CVE-2023-26256

CVE-2023-26256POC fofa:body="JIRA"&&body="2.0.50" Usage: python3 CVE-2023-26256.py -h Disclaimer Any direct or indirect consequences and losses caused by the dissemination or use of the information provided in this document shall be borne by the user themselves. The author assumes no responsibili...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

CVE-2023-20198-RCE

Fofa body="window.onload=function url ='/webui';window.location.href=url;" && ishoneypot=false && isfraud=false Usage usage: CVE-2023-20198-RCE.py -h -u URL -p PROXY -au ADDUSER -ap ADDPASS -du DELUSER -pm PRIVILEGEMODE -em EXPLOITMODE -oc OSCMD -cc CLICMD CVE-2023-20198-RCE options: -h, --help...

Emlog Pro v2.1.14 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting

Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. id: CVE-2011-4336 info: name: Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting author: pikpikcu severity: medium description: Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python PoC.py Vulnerability verification for individual websites. python PoC.py -u https://1.1.1.1 Command execution. python PoC.py -u https://1.1.1.1 -e...

CVE-2023-3450

CVE-2023-3450 fofa：iconhash="-399311436" 案例：http://123.54.231.201:6060 Usage: python3 CVE-2023-3450.py -h, --help python3 CVE-2023-3450.py -u URL, --url URL python3 CVE-2023-3450.py -f FILE, --file FILE...

oopso

oopso An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines. Version: 1.0 Features Multi-engine support: Automatically translates fingerprints into native query syntax for Shodan, FOFA, ZoomEye, and Censys Extensive coverage: Built-in signature...

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly CVE-2026-39363...