claude-bug-bounty

BugHunter AI-संचालित बग बाउंटी हंटिंग — recon से रिपोर्ट तक, आपके टर्मिनल में। मुफ़्त सेटअप · त्वरित प्रारंभ · कमांड · यह क्या खोजता है · इंस्टॉल · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa3...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

hackerone

hackerone J'ai collecté tous les rapports divulgués de hackerone en bruteforçant leur api https://api.hackerone.com/v1/hackers/reports/id du numéro 1 à 1 500 000. Il se peut qu'il y ait plus de rapports, dont l'identifiant est supérieur à 1 500 000. Le fichier reports.csv contient plus de 10 000...

DarkAngel

English | 中文 DarkAngel is a fully automatic white hat vulnerability scanner, which can monitor hacker and bugcrowd assets, generate vulnerability reports, screen capture of vulnerability URL, and send message notifications. DarkAngel download address：github.com/Bywalks/DarkAngel Currently support...

open-sesame

open-sesame इसमें हैकरवन HackerOne द्वारा प्रकट की गई रिपोर्ट्स और अन्य बग बाउंटी राइटअप्स शामिल हैं। एक पायथन टूल जो बोर होने पर यादृच्छिक रूप से सार्वजनिक रूप से प्रकट हैकरवन रिपोर्ट प्रदर्शित करने के लिए चलता है। स्वचालित रूप से ब्राउज़र में रिपोर्ट खोलता है। इसमें 8k से अधिक सार्वजनिक रूप से...

CVE-2000-0114

CVE-2000-0114 This a CVE I found it in VDP at hackerone Platform Steps to POC :- 1 - install " pip install CVE-2000-0114 " 2 - run " CVE-2000-0114 -u https://example.com " 3 - or you can run script...

hackerone-reports

Live site: reddelexc.github.io/hackerone-reports Tops of HackerOne reports. All reports' raw info stored in data.csv. Scripts to update this file are written in Python 3 and require chromedriver and Chromium executables at PATH. Every script contains some info about how it works. The run order of...

rengine

reNgine: أداة الاستطلاع وفحص الثغرات النهائية للويب 🚀 تم إصدار reNgine 2.2.0! يأتي reNgine 2.2.0 مع bounty hub حيث يمكنك مزامنة واستيراد برامج hackerone الخاصة بك، إشعارات داخل التطبيق، chaos كأداة تعداد النطاقات الفرعية، القدرة على ر...

Needle

Needle Chrome एक्सटेंशन: विभिन्न प्लेटफार्मों के आपके बग बाउंटी सबमिशन डैशबोर्ड + सार्वजनिक रूप से खुलासा रिपोर्ट + bugbountytip तक तत्काल पहुँच Needle एकमात्र ऐसा Chrome एक्सटेंशन है जिसकी आपको आवश्यकता हो सकती है ताकि एक क्लिक से विभिन्न प्लेटफार्मों पर अपने बग सबमिशन तक पहुँच सकें। कोई बुकमार्...

CVE-2021-22880

CVE-2021-22880 उपयोग rails-server और PoC बनाना। hackerOne देखें।...

perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery SSRF attacks. id: CVE-2022-41412 info: name: perfSONAR 4.x = 4.4.4 - Server-Side Request Forgery author: nullhypothesis severity: high descriptio...

Ruby on Rails Web Console - Remote Code Execution

Ruby on Rails Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelistedips protection mechanism via a crafted request to request.rb...

Rocket.Chat - Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. id: CVE-2024-39713 info: name: Rocket.Chat - Server-Side Request Forgery SSRF author: iamnoooob,rootxharsh,pdresearch severity: high description: | A Server-Side Request Forgery SSRF affects...

AvantFAX 3.3.3 - Cross-Site Scripting

AvantFAX 3.3.3 contains a cross-site scripting vulnerability via an arbitrary parameter name submitted to the default URL, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1. id: CVE-2017-18024 info: name: AvantFAX 3.3.3 - Cross-Site Scripting author: pikpikc...

DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery

DotNetNuke aka DNN before 9.2.0 suffers from a server-side request forgery vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources. id: CVE-2017-0929 info: name: DotNetNuke DNN ImageHandler 9.2.0 - Server-Side Request Forgery author...

Flyte Console <0.52.0 - Server-Side Request Forgery

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or...

Redash Setup Configuration - Default Secrets Disclosure

Redash Setup Configuration is vulnerable to default secrets disclosure Insecure Default Initialization of Resource. If an admin sets up Redash versions =10.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both...

Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2020-26413 info:...

node-srv - Local File Inclusion

node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path. id: CVE-2018-3714 info: name: node-srv - Local File Inclusion author: madrobot severity: medium description: node-srv is vulnerable to local fil...

WordPress Sensei LMS <4.5.0 - Information Disclosure

WordPress Sensei LMS plugin before 4.5.0 is susceptible to information disclosure. The plugin does not have proper permissions set in a REST endpoint, which can allow an attacker to access private messages. id: CVE-2022-2034 info: name: WordPress Sensei LMS 4.5.0 - Information Disclosure author:...