128 matches found
wafpass
WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...
vuln-CVE-2022-41082
漏洞-CVE-2022-41082 https 和 http 对于 HTTP： nmap -p80 --script exchange-vuln-check.nse 对于 HTTPS： nmap -p443 --script exchange-vuln-check.nse 将结果保存到文件 nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
httprobe
httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...
PacketSender
简介 https://packetsender.com 阅读其他语言版本：English, Español, Deutsch, Français, italiano, 简体中文. Packet Sender 是一款开源工具，可用于发送和接收 TCP、UDP 以及 SSL（加密 TCP）数据包，同时支持 HTTP/HTTPS 请求和面板生成。主分支正式支持 Windows、Mac 和桌面 Linux（基于 Qt）。其他平台可能会重新编译并重新分发 Packet Sender。Packet Sender 完全免费，采用 GPL v2...
Q-DDOS-GUI
Q-DDOS-GUI Cで書かれたDDOSツール TCP/HTTP/HTTPS対応 Cで書かれたddosツールです。TCP、HTTP、HTTPSプロトコルに対する攻撃を行います。秒数の範囲内でランダムなTIMEOUTを選択するか、固定のTimeoutを指定してDDOS攻撃を実行します。使用するスレッド数を選択できます。 すべてのスレッドとプロセスを停止するには、「stop all」チェックボックスをオンにしてください。 いかなる誤用についても責任を負いません。...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS
此检查仅用于演示。 cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS 直接针对已发现的 HTTP 和 HTTPS 服务上的 OpenSSL 产品进行检测。此检查不会检测存在漏洞的 OpenSSL 1.0.2-beta 版本。此外，OpenSSL 通常被打包到其他软件中，因此建议针对任何使用 SSL 响应的服务进行更精准的检测。 注意：此检查基于版本检测，并不直接测试漏洞。 其他检测方法 从 nmap -A -T4 --xml targets 中发现并提取使用 SSL 的端口和目标列表 使用 NMAP 6.3+ 循环遍历目标主机：nmap -sV -...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
cve-2021-38647
cve-2021-38647 Un exploit PoC para CVE-2021-38647 RCE en OMI. Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTPS predeterminado: root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTP predeterminado:...
Open Redirect
Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Open Redirect via improper handling of URLs in the navigateTo function. An attacker can execute arbitrary scripts or redirect users to malicious sites by supplying crafted URLs that exploit path normalization a...
GHSA-375F-4R2H-F99J Bandit trusts client-supplied URI scheme on plaintext connections
Summary Bandit reflects the client-supplied URI scheme into conn.scheme without verifying the actual transport. Over a plaintext HTTP/1.1 connection or h2c, an unauthenticated attacker can send an absolute-form request target like GET https://victim/path HTTP/1.1 and the application observes...
CVE-2026-42404
Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...
DEBIAN-CVE-2026-40490
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled followRedirecttrue, versions of AsyncHttpClient prior to 3.0.9 and 2.14.5 forward Authorization and Proxy-Authorization headers...
Server-side Request Forgery (SSRF)
Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...
MiracleLinux 9 : squid-5.5-6.el9_3.2 (AXSA:2023-7053:06)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-7053:06 advisory. squid: DoS against HTTP and HTTPS CVE-2023-5824 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...
CVE-2025-14524
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
EUVD-2019-0258
Malware in sbrugna...
EUVD-2012-3662
Malware in sbrugna...