68 matches found
IPRotate_Burp_Extension
IPRotateBurpExtension Extensión para Burp Suite que utiliza AWS API Gateway para cambiar tu IP en cada solicitud. Más información: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Nota/Advertencia Este método de usar AWS API Gateways para ofuscar la IP de origen ahora se considera...
IPBan
IPBan - 在 Linux 和 Windows 上快速轻松阻止攻击者的免费软件 有用链接 访问 https://ipban.com/upgrade-to-ipban-pro/ 可获 IPBan Pro 折扣。 将 IPBan 与 IPThreat 集成，IPThreat 是一个 100% 免费使用的网站和服务，社区提交恶意IP地址。帮助使互联网更安全，并加入其他数百名志同道合的用户。 您也可以访问 IPBan Discord（https://discord.gg/GRmbCcKFNR）与其他 IPBan 用户交流。 注册 IPBan 邮件列表 要求 IPBan 免费版需要 .NET ...
crowdsec
CrowdSec es una solución de seguridad de código abierto y participativa que ofrece detección y protección contra IPs maliciosas mediante crowdsourcing. Detecta y bloquea con nuestro Motor de Seguridad, contribuye a la red y disfruta de nuestra lista de bloqueo comunitaria en tiempo real...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban：禁止导致多次认证错误的主机 Fail2Ban 扫描 /var/log/auth.log 等日志文件，并禁止尝试过多失败登录的 IP 地址。它通过更新系统防火墙规则，在可配置的时间内拒绝来自这些 IP 地址的新连接。Fail2Ban 开箱即用，可读取许多标准日志文件（例如 sshd 和 Apache 的日志），并且可以轻松配置，使其能够根据需要读取任何日志文件中的任何错误。 虽然 Fail2Ban...
firecall
firecall 自动化与防火墙、交换机等的SSH通信 描述 这些脚本旨在自动化向Cisco ASA防火墙发送命令。其预期目的是消除手动登录防火墙进行更改的需要。该代码可以直接通过命令行运行，也可以集成到其他脚本中。这些脚本专为自动化/编排而设计——如果安全地执行，这些脚本可以接收安全情报数据，根据特定条件自动阻止恶意IP。 配置 1. 运行 bash install.sh 以设置有用的别名并启用日志记录 2. 在文本编辑器中配置“config”文件，添加防火墙地址、身份验证以及任何其他适用的选项，例如： 添加多个防火墙以同时配置它们 配置电子邮件警报，以便在IP被阻止或解除阻止时收到通...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes Bloquea todos los nodos explotables por vulnerabilidades de denegación de servicio en tu nodo CVE-2018-17144 Requisitos para el script bash ban.sh Procesador JSON de línea de comandos jq. Instalación en Linux basado en Debian root@kitploit: sudo apt-get install jq...
RDP-Guard
RDP Guard RDP Guard supervisa los intentos fallidos de inicio de sesión RDP en el registro de seguridad de Windows y bloquea las direcciones IP remotas abusivas a través del Firewall de Windows. Valores predeterminados ID de evento: 4625 LogonType: 3 o 10 Umbral: 3 o más fallos de auditoría...
CVE-2026-46415 Caddy Defender trusted proxy client IP bypass
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...
PYSEC-2026-2458 docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
Impact The URLInputHandler class in doclinggraph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...
CVE-2026-34170
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GithubApp apiurl field is used as the base URL for server-side HTTP requests without allowlisting or private IP blocking, allowing an authenticated user to configure a...
CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...
CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...
CVE-2026-33060 CKAN MCP Server: SSRF via base_url allows access to internal networks
CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to...
CVE-2026-27023
Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but did not validate redirect targets. An authenticated user who could control outbound request URLs e.g., webhook endpoints, image URLs could bypass...
cybersec-ids
cybersec-ids Full-stack AI-driven Web App Intrusion Detection...
EUVD-2018-13342
Malware in sbrugna...