nipe

Un motor para hacer de la red Tor tu puerta de enlace predeterminada. Resumen El proyecto Tor permite a los usuarios navegar por Internet, chatear y enviar mensajes instantáneos de forma anónima a través de su propio mecanismo. Es utilizado por una amplia variedad de personas, empresas y...

CVE-2022-22947

Entorno RCE de Spring Cloud Gateway CVE-2022-22947 CVE-2022-22947 fue identificado en el jar del servidor Spring Cloud Gateway. Después de compilar la aplicación, debería poder ver las rutas existentes visitando: http://127.0.0.1:9000/actuator/gateway/routes Compilar root@kitploit: $ mvn package...

GPON-LOADER

GPON-LOADER Cargador de exploits para ejecución remota de código con payload en dispositivos GPON Home Gateway CVE-2018-10562 escrito en Python. Dependencias requests Uso root@kitploit: python gpon-loader.py...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

CVE-2022-22947

CVE-2022-22947 A code injection attack on spring cloud gateway Summary of the CVE In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make ...

CVE-2024-24919-POC

PoC de CVE-2024-24919 🚀 🔥 Descripción Este script automatiza la explotación de CVE-2024-24919 Divulgación no autorizada de información de Checkpoint Security Gateway. 📌 Características ✅ Prueba de URLs individuales y en masa ✅ Explotación automatizada ✅ Simple y rápido 🛠️ Uso Clona este repositori...

SpEL

SpEL Herramienta de detección por lotes de inyección de expresiones SpEL en la API de Actuator de Spring Cloud Gateway CVE-2022-22947 Uso En el archivo, escriba las URLs a detectar, una por línea. Use el parámetro -TF para especificar el archivo y -t para el número de hilos concurrentes. Ejemplo ...

CVE-2022-22947

Spring Cloud Gateway Actuator API Inyección de expresión SpEL y ejecución de comandos CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 Uso: root@kitploit: -t http://vuldomain.com //IP individual -f urls.txt //Escaneo masivo desde archivo, multihilo, rápido -c...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Code Execution python usage: python CVE-2019-19781.py http://192.168.3.244 0x01 download NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/ configure static networ...

dockernymous

DESPLÁZATE HACIA ABAJO PARA REQUISITOS E INSTRUCCIONES NO FUNCIONARÁ SI NO LOS SIGUES Advertencia: Dockernymous se encuentra en una fase muy temprana de desarrollo. Úsalo solo con fines educativos. ¡NO lo uses si dependes de un anonimato fuerte! Novedades 13.10.2018 Cambié completamente la lógica...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

Spring Cloud Gateway Server Webflux - Broken Access Control

Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure. id: CVE-2025-41243 info: name:...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Cassia Gateway Firmware - Remote Code Execution

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup. id: CVE-2023-31446 info: name: Cassia Gateway Firmware - Remote Code...

Payment Gateway for Telcell < 2.0.4 - Open Redirect

The plugin does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue id: CVE-2023-6786 info: name: Payment Gateway for Telcell 2.0.4 - Open Redirect author: s4e-io severity: medium description: | The plugin does not validate the apiurl...

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. id: CVE-2021-35336 info: name: Tieline IP Audio Gateway =2.6.4.8 -...

Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read

An arbitrary file read vulnerability, also known as a "path traversal" or "directory traversal" vulnerability, occurs when an attacker is able to access files on a system that they shouldn't have access to. This vulnerability arises from improper input validation or insufficient access controls i...