Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. id: CVE-2017-18556 info: name: Google Analytics by BestWebSoft 1.7.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-analytics plugin before 1.7.1 for WordPress has...

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints

The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as movi...

WP Google Maps < 7.10.43 - Cross-Site Scripting

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATHINFO. id: CVE-2019-9912 info: name: WP Google Maps 7.10.43 - Cross-Site Scripting author: ritikchaddha severity: medium description: | The wp-google-maps plugin before 7.10.43 for WordPress has XSS via t...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

doork

doork descrizione doork è uno strumento open-source di audit passivo delle vulnerabilità che automatizza il processo di ricerca su Google di informazioni su siti web specifici basate su dork. doork può aggiornare il proprio database da ghdb e usarlo per trovare falle senza nemmeno contattare...

pepe

PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...

MasterHttpRelayVPN

MasterHttpRelayVPN Ricerca sicura di YouTube e live streaming sono ora bypassati e funzionanti di default, quindi non hai bisogno di youtubeviarelay o di un exitnode Cloudflare/VPS per questo. Lingua: Inglese | Persiano / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفاده کنید. Cana...

tsunami-security-scanner

Tsunami Tsunami ist ein universeller Netzwerksicherheitsscanner mit einem erweiterbaren Plugin-System zur Erkennung schwerwiegender Sicherheitslücken mit hoher Zuverlässigkeit. Weitere Informationen zu Tsunami finden Sie in unserer Dokumentation. Tsunami stützt sich stark auf sein Plugin-System, ...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

gitleaks

Gitleaks root@kitploit: ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks...

magika

Magika...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

android-classyshark

ClassyShark Introduzione ClassyShark è uno strumento di ispezione binaria standalone per sviluppatori Android. Può navigare in modo affidabile qualsiasi eseguibile Android e mostrare informazioni importanti come interfacce e membri delle classi, conteggi dex e dipendenze. ClassyShark supporta...

CVE-2023-27587-PoC

CVE-2023-27587-PoC La semplice PoC di CVE-2023-27587 Cos'è ReadToMyShoe? ReadtoMyShoe RTMS è un'applicazione web rust, yew e axum che ti consente di caricare articoli tramite URL o incollandoli direttamente e ascoltarli in seguito. Impatto Se si verifica un errore durante l'aggiunta di un articol...

phantomrecon

PhantomRecon PhantomRecon è uno strumento di automazione red team basato su CLI, modulare e guidato da agenti, progettato per dimostrare flussi di lavoro di sicurezza offensiva autonomi alimentati dall'IA Gemini di Google tramite Agent Development Kit - ADK. Avvio rapido CLI Esegui la console...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

CVE-2017-5638

CVE-2017-5638 Google Dork : "site:com filetype:action"...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

poc_monitor

pocmonitor Un piccolo scraper che cerca un POC di CVE-2024-49112 Impostando un cron job per eseguire lo script ogni 4 ore, gli aggiornamenti restano attivi. La notifica può essere personalizzata, ma è stato utilizzato un webhook di Discord per avvisare un canale Discord. 0 /4 cd /root/monitorscri...