CVE-2018-11776-Python-PoC

CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c su twitter Test funzionante in Python e PoC per CVE-2018-11776, originariamente apparso su; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Cosa sta succedendo? Man Yue Mo di Semmle ha divulgato una vulnerabilità RCE in Struts...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 Dies ist eine sehr einfache Implementierung in bash des CVE-2019-6447 PoC. Es verwendet im Grunde curl, um die Anfragen mit den richtigen Parametern zu senden. Ich habe es erstellt, da ich während eines CTF nach einem ähnlichen Skript suchte und keins...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CVE-2024-28995-Nuclei-Template

Шаблон Nuclei для CVE-2024-28995 Проверяет наличие уязвимости обхода каталога в Serv-U версии 15.4.2 и ниже, позволяющей читать чувствительные файлы, такие как /etc/passwd. Детали шаблона root@kitploit: id: CVE-2024-28995 info: name: Serv-U Directory Traversal Vulnerability author: Hüseyin TINTAŞ...

DSP

DockerSecurityPlayground Docker Security Playground è un'applicazione che ti permette di: Creare scenari di rete e di sicurezza di rete , per comprendere protocolli di rete, regole e problemi di sicurezza installando DSP sul tuo PC. Imparare tecniche di penetration testing simulando scenari di...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

zeek-jetdirect

Zeek Package for zeek-jetdirect .. image::...

TLS-Attacker

TLS-Attacker TLS-Attacker è un framework basato su Java per analizzare librerie TLS. È in grado di inviare messaggi di protocollo arbitrari in un ordine arbitrario al peer TLS e di definire le loro modifiche tramite un'interfaccia fornita. Questo offre allo sviluppatore l'opportunità di definire...

ARTLAS

ARTLAS Sistema di Analisi dei Log di Apache in Tempo Reale Analizzatore di log Apache in tempo reale, basato sulle prime 10 vulnerabilità OWASP, identifica tentativi di esplorazione nella tua applicazione web e notifica te o il tuo team di incidenti su Telegram, Zabbix e Syslog/SIEM. ARTLAS...

CVE-2023-41425

Wonder CMS RCE | | विवरण : XSS से RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

ldap_shell

LDAP shell Questo progetto è un fork di ldapshell da Impacket. Fornisce una shell interattiva per l'enumerazione e la manipolazione di Active Directory tramite i protocolli LDAP/LDAPS, risultando utile sia per amministratori di sistema che per professionisti della sicurezza. Installazione Questi...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

graphw00f

क्रेडिट्स निक अलेक्स को लोगो के लिए! graphw00f - GraphQL सर्वर फिंगरप्रिंटिंग विषय सूची यह कैसे काम करता है? पहचान GraphQL खतरा मैट्रिक्स पूर्वापेक्षाएँ स्थापना विन्यास उपयोग उदाहरण GraphQL फिंगरप्रिंटिंग GraphQL का पता लगाना और फिंगरप्रिंट करना समर्थन और समस्याएँ संसाधन यह कैसे काम करता है?...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2026-62249 Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

CVE-2026-62249 Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...