httpgrep

Descripción Una herramienta Python rápida y asíncrona que escanea servidores HTTPS y busca cadenas o patrones regex en cuerpos y cabeceras de respuestas HTTP. Acepta hosts individuales, URLs, rangos CIDR, rangos IP o archivos; escanea múltiples puertos por objetivo único, listas separadas por com...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit herramienta de detección y escaneo abierta para descubrir y realizar fuzzing de la vulnerabilidad Log4J RCE CVE-2021-44228 preparación POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd...

scscanner_sh

scscanner - Escáner Masivo de Códigos de Estado scscanner es una herramienta para leer el código de estado de respuesta HTTP de sitios web a partir de listas. Esta herramienta tiene la capacidad de filtrar solo códigos de estado específicos y guardar el resultado en un archivo. Características...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit El script de metasploit PoC sobre CVE-2021-36260. Una vulnerabilidad de inyección de comandos en el servidor web de algunos productos Hikvision; un atacante puede explotar la vulnerabilidad para lanzar un ataque de inyección de comandos enviando mensajes con comandos...

cve-2026-20127

CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127. Features IP range scanning start → end...

EUVD-2006-5012

Malware in sbrugna...

EUVD-2006-5011

Malware in sbrugna...

EUVD-2006-5010

Malware in sbrugna...

CVE-2006-5025

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner sHTTPScanner before 0.2 have unknown impact and attack vectors...

Log4Shell HTTP Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Log4Shell HTTP Scanner', 'Description' = %q Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration,...

TP-Link Wireless Lite N Access Point Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TP-Link Wireless Lite N Access Point Directory Traversal Vulnerability', 'Description' = %q This module tests whether a directory traversal...

Emby SSRF HTTP Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Emby SSRF HTTP Scanner', 'Description' = 'Generates a GET request to the provided web servers and executes an SSRF against the targeted EMBY...

Metasploit Wrap-Up

Log4Shell - Log4j HTTP Scanner Versions of Apache Log4j impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will scan an HTTP endpoint for the...

Log4Shell HTTP Scanner

Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will scan an HTTP end point for the Log4Shell vulnerability by injectin...

Emby SSRF HTTP Scanner

Generates a GET request to the provided web servers and executes an SSRF against the targeted EMBY server. Returns the server header, HTML title attribute and location header if set. This is useful for rapidly identifying web applications on the internal network using the Emby SSRF vulnerability...

Metasploit Wrap-Up

Keep your eyes peeled for another Metasploit CTF We hosted our third Annualish Metasploit CTF back in January of this year. All 1,000 slots were booked within days of announcing the competition. Because of the resounding success, we'll be hosting the fourth Annualish Metasploit CTF by year’s end...

Jupyter Login Utility

This module checks if authentication is required on a Jupyter Lab or Notebook server. If it is, this module will bruteforce the password. Jupyter only requires a password to authenticate, usernames are not used. This module is compatible with versions 4.3.0 released 2016-12-08 and newer. Module...

CVE-2020-11491

creationtimestamp| type| source ---|---|--- 2020-04-16 16:13:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/zenloadbalancertraversal.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:47:59+00:00|...

Withings Wi-Fi Body Scale Detection via HTTP

Binary data 700296.prm...

CVE-2025-34118

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/linknatvostraversal.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:47:36+00:00| seen|...