128 matches found
wafpass
WAFPASS root@kitploit: ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████...
Q-DDOS-GUI
Q-DDOS-GUI DDOS SCRITTO IN C TCP/HTTP/HTTPS ddos scritto in c . Attacco tramite protocollo tcp, http e https. Attacco con ddos scegliendo un TIMEOUT casuale tra un intervallo di secondi o con un Timeout definito. Seleziona il numero di thread che desideri utilizzare. spunta la casella 'stop all'...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
httprobe
httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...
cve-2021-38647
cve-2021-38647 Ein PoC-Exploit für CVE-2021-38647 RCE in OMI. Führe einen einzelnen Befehl mit ExecuteShellCommand auf dem standardmäßigen HTTPS-Port aus: root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id Führe einen einzelnen Befehl mit ExecuteShellCommand auf dem standardmäßigen...
vuln-CVE-2022-41082
vuln-CVE-2022-41082 https & http PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS
Dieser Check dient nur zur Demonstration. cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS Zielt direkt auf das OpenSSL-Produkt auf erkannten HTTP- und HTTPS-Diensten. Dieser Check prüft nicht auf OpenSSL 1.0.2-beta, das verwundbar ist. Außerdem ist OpenSSL häufig in andere Software integriert und...
PacketSender
Introduzione https://packetsender.com Leggi questo in altre lingue:English, Español, Deutsch, Français, Italiano, 简体中文. Packet Sender è un'utilità open source che permette di inviare e ricevere pacchetti TCP, UDP e SSL TCP crittografato, nonché richieste HTTP/HTTPS e la generazione di pannelli. I...
Open Redirect
Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Open Redirect via improper handling of URLs in the navigateTo function. An attacker can execute arbitrary scripts or redirect users to malicious sites by supplying crafted URLs that exploit path normalization a...
GHSA-375F-4R2H-F99J Bandit trusts client-supplied URI scheme on plaintext connections
Summary Bandit reflects the client-supplied URI scheme into conn.scheme without verifying the actual transport. Over a plaintext HTTP/1.1 connection or h2c, an unauthenticated attacker can send an absolute-form request target like GET https://victim/path HTTP/1.1 and the application observes...
CVE-2026-42404
Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...
DEBIAN-CVE-2026-40490
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled followRedirecttrue, versions of AsyncHttpClient prior to 3.0.9 and 2.14.5 forward Authorization and Proxy-Authorization headers...
Server-side Request Forgery (SSRF)
Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...
MiracleLinux 9 : squid-5.5-6.el9_3.2 (AXSA:2023-7053:06)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-7053:06 advisory. squid: DoS against HTTP and HTTPS CVE-2023-5824 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...
CVE-2025-14524
When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...
EUVD-2019-0258
Malware in sbrugna...
EUVD-2012-3662
Malware in sbrugna...