Lucene search
+L

14 matches found

Kitploit
Kitploit
added 2026/09/15 12:01 a.m.7 views

hakrevdns

hakrevdns 大量のIPアドレスに対して逆DNSルックアップを実行するための、小さく高速でシンプルなツール。 IPアドレスを入力すると、ホスト名を返します。 これは、企業のIPアドレスからその企業に属するドメインやサブドメインを見つける便利な方法です。 インストール root@kitploit: go install github.com/hakluke/hakrevdns@latest 使用法 最も基本的な使い方は、IPアドレスのリストをツールにパイプで渡すだけです。例: root@kitploit: hakluke$ prips 173.0.84.0/24 | hakrevdn...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 10:43 p.m.6 views

f5_scanner

f5scanner F5 대량 스캐너 및 CVE-2020-5902 체커 이 도구는 30개의 스레드가 하드코딩된 대량 스캐너입니다. 주의하여 사용하세요. 설정 방법 root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt 실행 방법 단일 IP python3 f5scanner.py --ip 192.168.1.1 CIDR python3 f5scanner.py --cidr 192.168.0.0/24...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/14 1:19 p.m.11 views

fierce-domain-scanner

Fierce.pl 도메인 스캐너 원저자: RSnake https://twitter.com/rsnake 개요: Fierce는 반경량 스캐너로, 지정된 도메인에 대해 비연속적인 IP 공간과 호스트 이름을 찾는 데 도움을 줍니다. 이는 기본적으로 nmap, unicornscan, nessus, nikto 등의 선행 단계로 설계되었습니다. 이 모든 도구는 이미 찾고자 하는 IP 공간을 알고 있어야 하기 때문입니다. 이 도구는 익스플로잇을 수행하지 않으며, 무차별적으로 전체 인터넷을 스캔하지 않습니다. 특히 기업 네트워크 내부와 외부에...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 1:19 p.m.3 views

R4venzCl4w

R4venzCl4w ◣◢ノ-=≡≡卍 Pentester 및 Bug Hunter 를 위한 Python3로 작성된 모듈식 프레임워크 목차 R4venzCl4w ◣◢ノ-=≡≡卍 기술 및 도구 요구 사항 기능 기능 구현 설치 설정 사용법 옵션 예시 할 일 기여 라이선스 🔧 기술 및 도구 📚 요구 사항 Python 3.9+ pip3 기능 빠르고 사용하기 쉬움 모듈식 프레임워크 IP 열거 DNS, Whois, 포트 스캔, 블랙리스트 검사, Ping, Traceroute, 지리적 위치 등 Shodan의 API를 사용하여 호스트 스캔 공용 프록...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 7:07 p.m.8 views

Pulse

嗨,这是一个脚本,用于检查来自 Shodan 的、存在 Pulse Secure 漏洞 CVE-2019-11510 的 IP 地址 感谢 Rakesh Parchuri 帮助编写此脚本 从输出中获取 IP 地址后,使用 metasploit 模块进行进一步利用 https://www.exploit-db.com/exploits/47297...

10CVSS8.1AI score0.99999EPSS
SaveExploits22
CVE
CVE
added 2025/12/03 5:00 p.m.33 views

CVE-2025-20388

CVE-2025-20388 affects Splunk Enterprise and Splunk Cloud Platform. A user with a role that has the high-privilege capability change_authentication could enumerate internal IP addresses and network ports when adding new search peers to a Splunk search head in a distributed environment. Affected v...

2.7CVSS6.3AI score0.00353EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2025/12/03 12:00 a.m.15 views

Splunk Cloud Platform和Splunk Enterprise 代码问题漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A code issue vulnerability exists in Splunk...

2.7CVSS6.7AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/03 12:00 a.m.19 views

PT-2025-48960

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1, 9.4.6, 9.3.8, and 9.2.10 Splunk Cloud Platform versions prior to 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116 Description A user with a role containing the change authentication high privilege capabili...

2.7CVSS6.4AI score0.00353EPSS
SaveExploits0References6
Veracode
Veracode
added 2024/11/18 4:37 a.m.16 views

Information Leakage

symfony/http-client is vulnerable to IP/port enumeration. The vulnerability is due to improper handling of IP filtering in the NoPrivateNetworkHttpClient, which fails to block certain IPs early enough during host resolution, allowing an attacker to enumerate IP addresses and ports, potentially...

3.1CVSS6.5AI score0.00471EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2024/11/06 9:15 p.m.25 views

CVE-2024-50342

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...

4.3CVSS0.00471EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/06 9:03 p.m.18 views

CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously. When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port...

3.1CVSS6.7AI score0.00471EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/11/06 3:16 p.m.29 views

Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient

Description When using the NoPrivateNetworkHttpClient, some internal information is still leaking during host resolution, which leads to possible IP/port enumeration. Resolution The NoPrivateNetworkHttpClient now filters blocked IPs earlier to prevent such leaks. The fisrt patch for this issue is...

4.3CVSS3.8AI score0.00471EPSS
SaveExploits0References7Affected Software2
GithubExploit
GithubExploit
added 2024/05/31 1:14 a.m.316 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Usage - Usage: ./CVE-2024-24919.sh -i -p...

8.6CVSS9AI score0.99978EPSS
SaveExploits53
Positive Technologies
Positive Technologies
added 2021/04/22 12:00 a.m.8 views

PT-2021-19423 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 Description: An issue in the AbuseFilter extension for MediaWiki allows certain rules related to blocking accounts after account creation to be executed incorrectly. This could enable user accounts to be...

9.8CVSS6.2AI score0.03906EPSS
SaveExploits18References74
Rows per page
Query Builder