dnsresolver

dnsresolver Un resolvedor DNS ultrarrápido Tabla de contenidos Instalación Uso Uso básico Resolviendo hosts con puertos Enumeración de hosts virtuales Usando dominios no resueltos Usando localhost Demostraciones Comentarios Licencia Instalación Asegúrate de tener Rust instalado y luego ejecuta el...

optionsbleed

optionsbleed Esto es un código de prueba de concepto para comprobar el bug Optionsbleed en Apache httpd CVE-2017-9798. Por favor, considera usar la herramienta Snallygaster en su lugar; incluye una comprobación para optionsbleed: snallygaster -t optionsbleed host uso optionsbleed -h -n N -a -u...

CVE-2023-6553

CVE-2023-6553 Inclusión de archivos en PHP que conduce a RCE — Plugin Backup Migration Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Crítico CWE: CWE-98 — Control inadecuado del nombre de archivo para la declaración Include/Require Requisito de autenticación: Ninguno Impacto: Ejecución...

CVE-2026-35616-check

Herramienta de Evaluación de Vulnerabilidad CVE-2026-35616 Detecte de forma segura si un servidor FortiClient EMS es vulnerable a CVE-2026-35616 sin causar ninguna interrupción. Consulte el análisis completo en el blog de Bishop Fox. Descripción CVE-2026-35616 es una omisión de autenticación prev...

wwwgrep

WWWGrep OWASP 基金会网站仓库 作者：Mark Deen & Aditi Mohan 简介 WWWGrep 是一种快速搜索的“grep”机制，它按类型检查 HTML 元素，允许执行集中式（单个）、多文件（基于文件的 URL）以及递归式（可选择是否基于根域名）搜索。页面头部的名称和值也可以按此方式递归搜索。WWWGrep 旨在帮助攻击方和防御方快速审查待检查的代码库，以下列举了一些用例和示例。 安装 git clone pip3 install -r requirements.txt python3 wwwgrep.py 依赖项（pip3 install -r...

CVE-2026-21003-JWT-none-Algorithm-Bypass-via-kid-Header-Omission

CVE-2026-21003 – Bypass del algoritmo "none" de JWT mediante la omisión del encabezado kid Código del programa Node.js // jwtverifyserver.js - Vulnerable JWT verification const jwt = require'jsonwebtoken'; const express = require'express'; const app = express; app.useexpress.json; const publicKey...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introducción: Apache Struts 2 es un framework de aplicaciones web de código abierto para desarrollar aplicaciones Java EE. Es la segunda generación del framework Struts, lanzado por primera vez el 10 de octubre de 2006. El framework Struts está diseñado para ayudar a...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2017-7529-

CVE-2017-7529-Desbordamiento de Entero en el Encabezado Range de Nginx Nginx es un servidor web de alto rendimiento y un servidor proxy inverso, de caché, etc., ampliamente utilizado. En versiones de Nginx 1.13.2 e inferiores, existe una vulnerabilidad de desbordamiento de enteros que permite a u...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

CVE-2025-6783

Inyecta una condición siempre verdadera en la cláusula WHERE para que todas las filas coincidan: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED",...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

BypassFuzzer

Bypass Fuzzer 原始的 403fuzzer.py : ==注意：此工具已被弃用，请使用我的全新 Burp 扩展，它比这个好 1000000%。感谢您使用我的工具！== 您可以在此处找到该扩展：https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403 端点以寻找绕过方法 通过请求头、路径标准化、HTTP 方法等多种方式执行检查，尝试绕过 ACL 或 URL 验证。 输出每个请求的响应码和长度，以整洁、彩色编码的方式呈现，便于阅读。 “智能”过滤器，可在多次出现相同响应后自动静音。 从 Burp 导入原始 HTTP 请求...

CLEANSTART-2026-HZ65290 Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header

Security vulnerability affects the consul package. Consul and Consul Enterprise’s “Consul” event endpoint is vulnerable to denial of service DoS due to lack of maximum value on the Content Length header...

EUVD-2009-5122

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...

DVRFaultNET

DVRFaultNET .NET 控制台应用程序，利用 DVR CVE-2018-9995 漏洞 使用方法 启动后，系统会提示您输入 DVR 摄像头的 URL。程序会在 URL 后添加 ?opt=user&cmd=list，并发送包含 "Cookie:uid=admin" 标头的请求，然后服务器返回一个 JSON 字符串，其中包含所有用户的凭据。...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

RHEL 10 : kernel (RHSA-2026:74974)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:74974 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: ah6: validate routing header...

Linux Distros Unpatched Vulnerability : CVE-2026-63292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a...

CVE-2025-59342

CVE-2025-59342 - 路径遍历 esm-dev 作者：Byte Reaper 描述 CVE-2025-59342 是 esm.sh（一个用于现代 Web 开发的无构建内容分发网络 CDN）中存在于版本 136 及更早版本中的一个路径遍历漏洞。 该问题存在于对 X-Zone-Id HTTP 头的处理中，该头部用于构建文件系统路径。该头部的值未经过适当的规范化或限制在应用程序的存储基目录内。 因此，在 X-Zone-Id 中提供 ../ 序列可能导致文件被写入预期的存储位置之外。 要求 : Linux x8664 GCC 构建 : gcc exploit.c argparse.c...