2979 matches found
leprechaun
Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...
CVE-2026-33752
CVE-2026-33752 CVE-2026-33752Redirect-based SSRF leading to internal network access in curlcffi Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to...
of-CORS
of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...
internal-penetration-testing-project-using-Metasploit
This repository does not have a README...
CVE-2023-27163
Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...
sonar.js
sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....
pd-agent
ProjectDiscovery Cloud Platform β Agent What it does β’ Quick Start β’ Install β’ Configuration β’ Scaling What it does pd-agent lets you scan your own internal networks from the ProjectDiscovery Cloud Platform. Install the agent on a machine inside the network you want to scan β a VM, a server, a...
CVE-2026-43284-CVE-2026-43500-scan
DirtyFrag Scanner & Patcher Internal Network Tool for CVE-2026-43284 & CVE-2026-43500 Automated Linux LPE Audit & Mitigation via SSH Disclaimer : This tool is specifically designed for legitimate internal security audits. Using it without authorization against systems that are not yours is a...
Stowaway
Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...
Exploit_CVE-2023-27163
CVE-2023-27163 PoC Exploit Code This Python script is a Proof of Concept PoC for CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability in Request Basket. Code Description The script automates the exploitation of CVE-2023-27163. It performs the following actions: 1. Generates a random...
CVE-2021-36260
Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...
doublehop
Doublehop This tool aims to assist in using PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique. This tool assumes you have internal network and CLI access. Usage doublehop Usage: -c string Command we are executing. -j string Host we are...
EUVD-2026-108264
PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading...
CVE-2023-25203
CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...
DBScanner
DBScanner Unauthorized access + weak password batch detection Automatically scan common SQL and No-SQL database scripts on the internal network mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, including unauthorized access and common weak password detection Runs in a...
CVE-2026-33234
How I Turned AutoGPT's Email Feature Into an Internal Network Scanner CVE-2026-33234 | Moderate 5.0 | GHSA-4jwj-6mg5-wrwf Author: Pavan Nallamothu I was mapping every user-controlled input that touched the network in AutoGPT Platform. The HTTP layer was locked down tight. Private IP ranges...
Moodle-CVE-2018-1042
Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...
peeko
peeko Version: v1.1 peeko is a browser-based XSS-powered C2 Command and Control tool that leverages the victimβs browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central server, allowing an attacker to remotely...
CVE-2024-47066
CVE-2024-47066 β CVE-2024-47066 LobeChat SSRF PoC β Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...