httprobe

httprobe Prende una lista di domini e verifica quali server HTTP e HTTPS sono attivi. Installazione root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Utilizzo base httprobe accetta domini delimitati da nuove righe su stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com...

proxychains

ProxyChains ver. 4.3.0 README ProxyChains è un programma UNIX che aggancia le funzioni libc relative alla rete nei programmi collegati dinamicamente tramite una DLL pre-caricata e reindirizza le connessioni attraverso proxy SOCKS4a/5 o HTTP. ATTENZIONE: questo programma funziona solo su programmi...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

badger-builder

badger-builder badger-builder è uno strumento assistito dall'IA per generare profili dinamici per Brute Ratel C4. Basta fornire a badger-builder un flavor per il profilo desiderato e chiederà a OpenAI una configurazione adatta. Configurazioni del profilo listener/payload generate dall'IA: URI C2...

auto-repeater

AutoRepeater: Ripetizione automatica delle richieste HTTP con Burp Suite tl;dr All'interno di Extender importa AutoRepeater.jar Alcune brevi istruzioni AutoRepeater reinvierà solo le richieste modificate da una sostituzione definita. Quando AutoRepeater riceve una richiesta che corrisponde alle...

CypherDog

CypherDog4.3 PoSh BloodHound Hundeflüsterer a.k.a. PowerShell-Cmdlets zur Interaktion mit BloodHound-Daten über die Neo4j-HTTP-API Kompatibel mit Bloodhound 4.3+ und neo4j 4.4+...

CVE-2026-55484

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:02+00:00| published-proof-of-concept| https://github.com/guno1928/alos-http/security/advisories/GHSA-hr6j-w4mw-g9mj 2026-08-30 12:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucdu5szdq27...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini che sono stati presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutare a riportarli a...

CVE-2026-76651

A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...

CVE-2026-55484

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

slinger

slinger投石器 Un client HTTP per Rust progettato per hacker. Esplora la documentazione » · ·...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Dipartimento Cybersecurity ITSOLERA — Red Team Task 3 Team: Offensive Team Zeta Data: 18 marzo 2026 ⚠️ Disclaimer Questo repository è solo a scopo educativo. Tutti i test sono stati eseguiti in un laboratorio Docker locale isolato. No...

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

GHSA-HR6J-W4MW-G9MJ alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Summary A single unauthenticated HTTP request to a path starting with ? e.g. GET ? HTTP/1.1 crashes the entire server process. The request line parser passes the path to sanitizeRequestPath which indexes the first byte of the path after stripping the query string. It does so without checking that...

CVE-2026-55484

ALOS HTTP , a Linux-first Go web framework with a custom networking stack, is vulnerable to an unauthenticated remote denial-of-service . The root cause is an unchecked p[0] access in core/utils.go::sanitizeRequestPath after splitPathQuery processes a path beginning with a question mark, leaving ...

EUVD-2026-67872

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...