14 matches found
hakrevdns
hakrevdns 大量のIPアドレスに対して逆DNSルックアップを実行するための、小さく高速でシンプルなツール。 IPアドレスを入力すると、ホスト名を返します。 これは、企業のIPアドレスからその企業に属するドメインやサブドメインを見つける便利な方法です。 インストール root@kitploit: go install github.com/hakluke/hakrevdns@latest 使用法 最も基本的な使い方は、IPアドレスのリストをツールにパイプで渡すだけです。例: root@kitploit: hakluke$ prips 173.0.84.0/24 | hakrevdn...
f5_scanner
f5scanner F5 대량 스캐너 및 CVE-2020-5902 체커 이 도구는 30개의 스레드가 하드코딩된 대량 스캐너입니다. 주의하여 사용하세요. 설정 방법 root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt 실행 방법 단일 IP python3 f5scanner.py --ip 192.168.1.1 CIDR python3 f5scanner.py --cidr 192.168.0.0/24...
fierce-domain-scanner
Fierce.pl 도메인 스캐너 원저자: RSnake https://twitter.com/rsnake 개요: Fierce는 반경량 스캐너로, 지정된 도메인에 대해 비연속적인 IP 공간과 호스트 이름을 찾는 데 도움을 줍니다. 이는 기본적으로 nmap, unicornscan, nessus, nikto 등의 선행 단계로 설계되었습니다. 이 모든 도구는 이미 찾고자 하는 IP 공간을 알고 있어야 하기 때문입니다. 이 도구는 익스플로잇을 수행하지 않으며, 무차별적으로 전체 인터넷을 스캔하지 않습니다. 특히 기업 네트워크 내부와 외부에...
R4venzCl4w
R4venzCl4w ◣◢ノ-=≡≡卍 Pentester 및 Bug Hunter 를 위한 Python3로 작성된 모듈식 프레임워크 목차 R4venzCl4w ◣◢ノ-=≡≡卍 기술 및 도구 요구 사항 기능 기능 구현 설치 설정 사용법 옵션 예시 할 일 기여 라이선스 🔧 기술 및 도구 📚 요구 사항 Python 3.9+ pip3 기능 빠르고 사용하기 쉬움 모듈식 프레임워크 IP 열거 DNS, Whois, 포트 스캔, 블랙리스트 검사, Ping, Traceroute, 지리적 위치 등 Shodan의 API를 사용하여 호스트 스캔 공용 프록...
Pulse
嗨,这是一个脚本,用于检查来自 Shodan 的、存在 Pulse Secure 漏洞 CVE-2019-11510 的 IP 地址 感谢 Rakesh Parchuri 帮助编写此脚本 从输出中获取 IP 地址后,使用 metasploit 模块进行进一步利用 https://www.exploit-db.com/exploits/47297...
CVE-2025-20388
CVE-2025-20388 affects Splunk Enterprise and Splunk Cloud Platform. A user with a role that has the high-privilege capability change_authentication could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment. Affected v...
Splunk Cloud Platform和Splunk Enterprise 代码问题漏洞
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A code issue vulnerability exists in Splunk...
PT-2025-48960
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1, 9.4.6, 9.3.8, and 9.2.10 Splunk Cloud Platform versions prior to 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116 Description A user with a role containing the change authentication high privilege capabili...
Information Leakage
symfony/http-client is vulnerable to IP/port enumeration. The vulnerability is due to improper handling of IP filtering in the NoPrivateNetworkHttpClient, which fails to block certain IPs early enough during host resolution, allowing an attacker to enumerate IP addresses and ports, potentially...
CVE-2024-50342
symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...
CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client
symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Description When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port enumeration. Resolution The NoPrivateNetworkHttpClient now filters blocked IPs earlier to prevent such leaks. The fisrt patch for this issue is...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
CVE-2024-24919 Usage - Usage: ./CVE-2024-24919.sh -i -p...
PT-2021-19423 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 Description: An issue in the AbuseFilter extension for MediaWiki allows certain rules related to blocking accounts after account creation to be executed incorrectly. This could enable user accounts to be...