fierce-domain-scanner

Fierce.pl Domain Scanner ORIGINAL AUTHOR: RSnake https://twitter.com/rsnake Overview: Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It's really meant as a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of...

R4venzCl4w

R4venzCl4w ◣◢ノ-=≡≡卍 A modular Framework for Pentesters and Bug Hunters written in Python3. Table of Contents R4venzCl4w ◣◢ノ-=≡≡卍 Technologies & Tools Requirements Features Features Implementation Installation Config Usage Options Example Todo Contributing License 🔧 Technologies & Tools 📚...

hakrevdns

hakrevdns IP 주소 대량으로 역방향 DNS 조회를 수행하는 작고 빠르고 간단한 도구입니다. IP 주소를 입력하면 호스트 이름을 반환합니다. 이것은 회사가 보유한 IP 주소에서 해당 회사의 도메인 및 서브도메인을 찾는 유용한 방법이 될 수 있습니다. 설치 go install github.com/hakluke/hakrevdns@latest 사용법 가장 기본적인 사용법은 IP 주소 목록을 도구에 파이프로 전달하는 것입니다. 예를 들어: hakluke$ prips 173.0.84.0/24 | hakrevdns...

f5_scanner

f5scanner F5 mass scanner and CVE-2020-5902 checker This tool is mass scanner with 30 threads hardcoded use with caution How to setup $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt How to run Single IP python3 f5scanner.py --ip 192.168.1.1 CIDR...

Pulse

Hi this is script to check IP address from shodan that vulnerable to Pulse Secure exploit CVE-2019-11510 Thanks to Rakesh Parchuri for helping in writing the script After you get the IP's from the output use metasploit module to further exploit https://www.exploit-db.com/exploits/47297...

CVE-2025-20388

CVE-2025-20388 affects Splunk Enterprise and Splunk Cloud Platform. A user with a role that has the high-privilege capability change_authentication could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment. Affected v...

CVE-2025-20388: Server-Side Request Forgery (SSRF)

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capability changeauthentication could enumerate internal IP addresses and network por...

PT-2025-48960

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1, 9.4.6, 9.3.8, and 9.2.10 Splunk Cloud Platform versions prior to 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116 Description A user with a role containing the change authentication high privilege capabili...

Splunk Cloud Platform和Splunk Enterprise 代码问题漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A code issue vulnerability exists in Splunk...

Information Leakage

symfony/http-client is vulnerable to IP/port enumeration. The vulnerability is due to improper handling of IP filtering in the NoPrivateNetworkHttpClient, which fails to block certain IPs early enough during host resolution, allowing an attacker to enumerate IP addresses and ports, potentially...

CVE-2024-50342

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...

CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...

Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient

Description When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port enumeration. Resolution The NoPrivateNetworkHttpClient now filters blocked IPs earlier to prevent such leaks. The fisrt patch for this issue is...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Usage - Usage: ./CVE-2024-24919.sh -i -p...

PT-2021-19423 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 Description: An issue in the AbuseFilter extension for MediaWiki allows certain rules related to blocking accounts after account creation to be executed incorrectly. This could enable user accounts to be...