128 matches found
PacketSender
Introduction https://packetsender.com Читайте на других языках:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender — это утилита с открытым исходным кодом, позволяющая отправлять и получать TCP, UDP и SSL зашифрованный TCP пакеты, а также HTTP/HTTPS запросы и генерацию панелей...
cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS
이 검사는 데모용입니다. cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS 발견된 HTTP 및 HTTPS 서비스에서 직접 OpenSSL 제품을 대상으로 합니다. 이 검사는 취약한 OpenSSL 1.0.2-beta를 확인하지 않습니다. 또한 OpenSSL은 일반적으로 다른 소프트웨어에 패키징되어 있으며, SSL을 사용하여 응답하는 모든 서비스를 더 잘 대상으로 삼을 수 있습니다. 참고: 이 검사는 버전 확인이며 취약점을 직접 테스트하지 않습니다. 기타 탐지 방법. 다음에서 SSL을 사용하는 포트 및...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
wafpass
WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...
Q-DDOS-GUI
Q-DDOS-GUI DDOS НАПИСАН НА C TCP/HTTP/HTTPS ddos написан на C. Атака на протоколы TCP, HTTP и HTTPS. Атака с ddos с выбором случайного TIMEOUT в диапазоне секунд или с заданным таймаутом. Выберите количество потоков, которые вы хотите использовать. Отметьте флажок «остановить все», чтобы останови...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
httprobe
httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...
vuln-CVE-2022-41082
vuln-CVE-2022-41082 https и http ДЛЯ HTTP: nmap -p80 --script exchange-vuln-check.nse ДЛЯ HTTPS: nmap -p443 --script exchange-vuln-check.nse СОХРАНИТЬ РЕЗУЛЬТАТЫ В ФАЙЛ nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
cve-2021-38647
cve-2021-38647 PoC-эксплойт для CVE-2021-38647 RCE в OMI. Выполнение одной команды с помощью ExecuteShellCommand на стандартном HTTPS-порту: root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id Выполнение одной команды с помощью ExecuteShellCommand на стандартном HTTP-порту:...
Open Redirect
Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Open Redirect via improper handling of URLs in the navigateTo function. An attacker can execute arbitrary scripts or redirect users to malicious sites by supplying crafted URLs that exploit path normalization a...
GHSA-375F-4R2H-F99J Bandit trusts client-supplied URI scheme on plaintext connections
Summary Bandit reflects the client-supplied URI scheme into conn.scheme without verifying the actual transport. Over a plaintext HTTP/1.1 connection or h2c, an unauthenticated attacker can send an absolute-form request target like GET https://victim/path HTTP/1.1 and the application observes...
CVE-2026-42404
Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...
DEBIAN-CVE-2026-40490
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled followRedirecttrue, versions of AsyncHttpClient prior to 3.0.9 and 2.14.5 forward Authorization and Proxy-Authorization headers...
Server-side Request Forgery (SSRF)
Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...
MiracleLinux 9 : squid-5.5-6.el9_3.2 (AXSA:2023-7053:06)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-7053:06 advisory. squid: DoS against HTTP and HTTPS CVE-2023-5824 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...
CVE-2025-14524
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
EUVD-2012-3662
Malware in sbrugna...
EUVD-2004-0870
Malware in sbrugna...