HostHunter

HostHunter v2.0 Una herramienta para descubrir y extraer hostnames de manera eficiente a partir de un gran conjunto de direcciones IPv4 o IPv6 objetivo. HostHunter utiliza técnicas simples de OSINT y reconocimiento activo para mapear IPs objetivo con nombres de host virtuales. Esto es especialmen...

CVE-2026-91079

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

CVE-2026-91079

Huly Platform through 0.7.426 is affected by a server-side request forgery (SSRF) vulnerability in its print service . The root cause is a missing hostname allowlist validation : authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns a...

CVE-2026-91079 Huly Platform through 0.7.426 SSRF via Print Service

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

EUVD-2026-77714

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts es un scraper web de Bing.com para descubrir nombres de host por dirección IP. Descripción Bing-ip2hosts es un scraper web de Bing.com que descubre nombres de host por dirección IP. Bing es el motor de búsqueda insignia de Microsoft, anteriormente conocido como MSN...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

Disclaimer This article is intended solely for technical discussion and learning. Any direct or indirect consequences or losses caused by the use of the information provided herein shall be borne solely by the user. The author assumes no responsibility for such consequences or losses...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

fierce-domain-scanner

Fierce.pl Domain Scanner ORIGINAL AUTHOR: RSnake https://twitter.com/rsnake Overview: Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It's really meant as a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

CertCrunchy

root@kitploit: / \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Solo una herramienta de reconocimiento tonta que usa datos de certificados SSL para encontrar nombres de host...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

XSS-CVE-2022-30489

WAVLINK WN535G3 POST XSS Use CVE-2022-30489 PAYLOAD root@kitploit: POST /cgi-bin/login.cgi HTTP/1.1 Host: 98.127.66.193 Content-Length: 255 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://98.127.66.193 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0...

CVE-2018-19518

CVE-2018-19518 last rapport here : https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Usage run app root@kitploit: docker-compose up -d example normal usage for the web app. imap : webmail.grenoble-inp.org user : [email protected] password : xx...

sslScrape

sslScrape SSLScrape | A scanning tool for scaping hostnames from SSL certificates. Written by Peter Kim and @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Usage | python sslScrape.py CIDR Range E.X | python sslScrape.py 10.100.100.0/24...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...