liffy

高级本地文件包含利用工具 一款功能强大的 Python 本地文件包含（LFI）利用工具，具备 WAF 绕过、编码技术以及全面的漏洞检测等高级功能。 Liffy v2.0 是对 liffy 的重大增强版本，原始版本由 rotlogix/liffy 创建。此版本包含了现代化功能，如 Rich 终端输出、YAML 配置、增强的线程管理以及多种高级利用技术。 ⚠️ 大量新变更采用 vibe coding 方式完成。 目录 功能特性 安装 使用方法 配置 高级技术 示例 贡献 致谢 功能特性 核心 LFI 技术 data:// - 通过 data 包装器执行代码 expect:// - 通过...

awesome-censys-queries

Awesome Censys Queries 一个收集各种迷人且奇特的 Censys Search 查询的集合。 贡献 找到了一个很棒的查询？在此提交 想以其他方式贡献？请参阅贡献指南 资源 Censys Search CensysGPT Beta - AI 生成查询 旧版搜索查询 - 适用于旧版 Censys 搜索语法的查询 图例 🔎 → - 此图标将带您进入该查询的 Censys Search 结果页面。 目录 工业控制系统 物联网设备 安全应用 数据库 仪表盘 游戏服务器 媒体服务器 随机服务 高级查询 致谢 许可证 星标历史 工业控制系统 工业控制系统协议 🔎 →dsl...

CVE-2024-57378

CVE-2024-57378 ¿Cómo funciona este método de detección? Esta plantilla HTTP de Nuclei verifica una URL objetivo y su página /app/login para la interfaz web de Wazuh, extrae el valor de wazuhVersion con una expresión regular y confirma que la página es accesible estado 200 y que realmente es una...

Oracle-mysql-CVE-2012-2122

MySQL Authentication Bypass Vulnerability CVE-2012-2122 When connecting to MariaDB/MySQL, the entered password is compared with the expected correct password. Due to improper handling, even if memcmp returns a non-zero value, MySQL may still consider the two passwords as identical. That is, as lo...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

freshonions-torscraper

Fresh Onions TOR Hidden Service Crawler This is a copy of the source for the http://zlal32teyptf4tvi.onion hidden service, which implements a tor hidden service crawler / spider and web site. Features Crawls the darknet looking for new hidden service Find hidden services from a number of clearnet...

strongswan

Configuración de strongSwan Resumen strongSwan es una solución VPN de código abierto basada en IPsec. Este documento es solo una breve introducción al comando swanctl de strongSwan, que utiliza la moderna vici Versatile IKE Configuration Interface. El comando obsoleto ipsec , que utiliza la...

CVE-2021-24545

CVE-2021-24545 This is an XSS vulnerability discovered in a plugin that is no longer distributed as a plugin. WordPress Plugin HTML Author Bio description XSS This vulnerability is caused by improper validation of the description parameter in /wp-admin/profile.php. A remote attacker can exploit...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo 预认证远程代码执行 在 Marimo 中通过 WebSocket 终端实现未认证远程代码执行 📌 概述 CVE-2026-39987 是一个影响 Marimo 0.23.0 之前版本的严重预认证远程代码执行 漏洞。/terminal/ws WebSocket 端点完全绕过认证，允许任何未认证的攻击者以 Marimo 进程的权限（在 Docker 环境中通常为 root ）获取完整的交互式 PTY shell。 🛠️ 漏洞详情 CVE ID : CVE-2026-39987 受影响产品 : Marimo（响应式 Python 笔记本） 受影响版...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI +...

CVE-2021-38583

CVE-2021-38583 openBaraza HCM HR Payroll v.3.1.6 Reflected XSS vulnerability openBaraza HCM HR Payroll v.3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS vulnerability on multiple pages. https://openbaraza.org...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. ​ The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. ​ This may allow a malicious user to escalate his or her privileges on the system...

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki 0 Table of Contents 1. Summary 2. Vulnerability Details 3. Affected Versions 4. Proof-of-Concept 4.1 Building the payload 4.2 Manual exploitation 4.3 Automated python exploit 5. Mitigation 6. Credits & References 1 Summary CVE:...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute, the data-parent attribute and the data-container is vulnerable to Cross-Site Scripting attacks. Test...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Unauthenticated Privilege Escalation via Arbitrary Password Reset ☆ === Beelze === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type| Missing Authenticatio...

CVE-2020-10199

CVE-2020-10199 回显版本 随手写的未测试bug root@kitploit: Usage: python http://127.0.0.1:8080 username password 参考：https://www.cnblogs.com/magic-zero/p/12641068.html...

CVE-2026-34207

CVE-2026-34207 The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets. Intro I found this issue while reviewing Typebot , an open-source chatbot builder, with a...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ root@kitploit: python3 CVE-2024-27348.py -f targets.txt -c "command to execute"...

ransomware-simulator

Simulador de Ransomware Simulador de Ransomware de NCC Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Donato Ferrante, donato punto ferrante arroba nccgroup punto trust https://www.github.com/nccgroup/ransomware-simulator Publicado bajo AGPL; consulte...

CVE-2021-27928-POC

CVE-2021-27928 POC Descripción Se descubrió un problema de ejecución remota de código en MariaDB 10.2 anterior a 10.2.37, 10.3 anterior a 10.3.28, 10.4 anterior a 10.4.18 y 10.5 anterior a 10.5.9; Percona Server hasta 2021-03-03; y el parche wsrep hasta 2021-03-03 para MySQL. Una ruta de búsqueda...