lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

undetected-httpx

undetected-httpx undetected-httpx is a multi-purpose HTTP probing toolkit inspired by httpx. It is specifically engineered to bypass modern anti-bot infrastructures by mimicking real-world browser signatures. Traditional HTTP clients are easily fingerprinted and blocked by WAFs. This tool leverag...

CVE-2020-13942

CVE-2020-13942 Ejecute httpx o httprob en los objetivos antes de usar el script. USO ./CVE-2020-13942.sh target.txt Crédito Este script fue creado a partir del repositorio de Rohit Gautam...

EagleEye

EagleEye: Con la adición de la opción -ss en HTTPX de Project Discovery, ahora es posible crear una lista de URLs potencialmente vulnerables con gf xss y qsreplace con el payload XSS, como alerthacked. HTTPX visitará entonces todas las URLs y tomará capturas de pantalla de ellas, que se almacenan...

httpx

Características • Instalación • Uso • Documentación • Notas • Unirse a Discord httpx es un kit de herramientas HTTP rápido y multipropósito que permite ejecutar múltiples sondeos utilizando la biblioteca retryablehttp. Está diseñado para mantener la fiabilidad de los resultados con un número...

CVE-2020-13942

CVE-2020-13942 Ejecute httpx o httprob en los objetivos antes de usar el script. USO ./CVE-2020-13942.sh target.txt Crédito Este script fue creado a partir del repositorio de Rohit Gautam...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

httpx-action

httpx Action facilita la orquestación de httpx con GitHub Action. Ejemplo de uso GitHub Action ejecutando httpx en una lista de hosts - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Ejemplo de flujo de trabajo : .github/workflows/httpx.yml...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

Oneliner-Bugbounty

Oneliner-Bugbounty A collection oneliner scripts for bug bounty List tools Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Auto scanner subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates Finding files For example in here .js...

CVE-2019-9053

CVE-2019-9053 La publicación original se puede encontrar aquí Probado en Python 3.11 No asumo ninguna responsabilidad por el mal uso o uso no autorizado de este script. Consulta la publicación del blog para más información sobre este script Requisitos pip3 install httpx...

CVE-2023-23752

CVE-2023-23752 script bash simple para CVE-2023-23752 joomla CMS Puedes usar la opción -u para especificar una única URL o la opción -l para proporcionar un archivo que contenga una lista de URLs para probar el endpoint vulnerable. Este script guarda todos los datos de respuesta HTTP y muestra...

httpx

httpx This is a Mythic C2 Profile called httpx. This is a community request C2 Profile for Mythic that provides a more dynamic and configurable HTTP profile. This profile offers the following features: Callback Domains array of values Domain Rotation fail-over and round-robin Domain Fallback...

recon-ninja

recon-ninja The tool is a GitHub repository that provides a recon tool that lets you upload your domain discovery through an upload option. The tool utilizes HTTPX, which is a tool that scans for alive domains. The tool also has an integrated MongoDB Atlas database, which is a cloud-based databas...

CVE-2023-21887

CVE-2023-21887 Exploit This script scans a list of URLs for the CVE-2023-46805 vulnerability and exploits it Usage 1. Install required dependencies: pip install httpx...

CVE-2025-24893_Shell

2025-24893Shell requisitos: httpx uso: python exploit.py victim.com...

EUVD-2026-80073

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

CVE-2026-54549

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...

EUVD-2026-78887

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...

CVE-2026-54549 Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...