Stowaway

Stowaway English Stowaway es una herramienta de proxy multinivel escrita en Go, diseñada específicamente para profesionales de pruebas de penetración. Los usuarios pueden usar este programa para enrutar el tráfico externo a través de múltiples nodos hacia la red interna, superar las restricciones...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

of-CORS

of-CORS of-CORS es el conjunto de herramientas de Truffle Security para identificar y explotar configuraciones incorrectas de CORS en redes internas de objetivos de bug bounty mediante typosquatting. Puedes leer más aquí https://trufflesecurity.com/blog/of-CORS ¿Cómo funciona? of-CORS es una...

sonar.js

sonar.js Un framework para identificar y lanzar exploits contra hosts de la red interna. Funciona mediante enumeración de IPs por WebRTC, escaneo de hosts por WebSocket y fingerprinting de recursos externos. ¿Cómo funciona? Al cargar el payload sonar.js en un navegador web moderno ocurrirá lo...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

CVE-2023-27163

Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...

CVE-2023-25203

CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...

pd-agent

ProjectDiscovery Cloud Platform — Agent What it does • Quick Start • Install • Configuration • Scaling What it does pd-agent lets you scan your own internal networks from the ProjectDiscovery Cloud Platform. Install the agent on a machine inside the network you want to scan — a VM, a server, a...

stunner

STUNNER Stunner es una herramienta para probar y explotar servidores STUN, TURN y TURN sobre TCP. TURN es un protocolo usado principalmente en videoconferencias y chats de audio WebRTC. Si encuentras un servidor mal configurado, puedes usar esta herramienta para abrir un proxy socks local que...

doublehop

Doublehop Esta herramienta tiene como objetivo ayudar a utilizar PowerShell Remoting / WinRM para ejecutar comandos de PowerShell en hosts remotos mediante la técnica de doble salto de WinRM. Esta herramienta asume que tienes acceso a la red interna y a la CLI. Uso root@kitploit: doublehop Usage:...

fscan

Fscan English Herramienta integral de escaneo de red interna, automatización de escaneo de vulnerabilidades con un solo clic. Versión : 2.2.1 Características Capacidades de escaneo Descubrimiento de hosts - Sondeo de supervivencia ICMP/Ping, soporta estadísticas de supervivencia para segmentos...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...

GitLab CI Lint API - Server-Side Request Forgery

GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...

Gradio - Server Side Request Forgery

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

Moodle-CVE-2018-1042

Moodle CVE-2018-1042 Script para explotar CVE-2018-1042 con el fin de realizar escaneos de puertos internos...

slipstream

NAT Slipstreaming NAT 滑流攻击 允许攻击者远程访问受害者 NAT 后方 任意系统 上的任何 TCP/UDP 服务，只需受害者访问一个网站即可绕过受害者的 NAT/防火墙（远程任意防火墙端口控制）。 v1 开发者 ：@SamyKamkar // https://samy.pl v2 开发者 ：Samy Kamkar && Ben Seri && Gregory Vishnipolsky of Armis。 阅读Ben 和 Gregory 关于 v2 的优秀技术文章，其中深入介绍了他们对 v2 的更新以及大量额外细节。 v1 发布日期 ：2020年10月31日 👻 v2...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...