tilt

Tilt: Herramienta de búsqueda de IP desde terminal Una herramienta automática de búsqueda de IP y sondeo inverso para reconocimiento pasivo ████████╗██╗██╗ ████████╗ ╚══██╔══╝██║██║ ╚══██╔══╝ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ██║ ██║███████╗██║ ╚═╝ ╚═╝╚══════╝╚═╝ Descripción Tilt: Terminal ip lookup...

knxmap

KNXmap Una herramienta para escanear y auditar pasarelas KNXnet/IP en redes basadas en IP. KNXnet/IP define Ethernet como medio de comunicación física para KNX EN 50090, ISO/IEC 14543. KNXmap también permite escanear dispositivos en el bus KNX a través de pasarelas KNXnet/IP. Además del escaneo,...

cloud-buster

Resolvedor de Cloudflare Una herramienta integral de pentest que verifica sitios habilitados con Cloudflare en busca de fugas de IP de origen. ¡Está llena de características increíbles! escanea una amplia gama de malas configuraciones y vulnerabilidades busca en bases de datos de otros servicios ...

trident

trident El proyecto Trident es una herramienta automatizada de rociado de contraseñas desarrollada para cumplir con los siguientes requisitos: La capacidad de ser desplegado en varias plataformas en la nube/proveedores de ejecución La capacidad de programar campañas de rociado de acuerdo con la...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

reverseip_py

reverseippy Analizador de dominios para la búsqueda inversa de IP de IPAddress.com. Escrito en Python 3. ¿Qué es Reverse IP? Reverse IP se refiere al proceso de buscar todos los nombres de dominio que están alojados en una dirección IP particular. Esto puede ser útil por diversas razones, como...

cve-2019-2725

Run with python3 1. Place detection targets in the ip.txt file, format: 192.168.1.18:7001 2. Run the script directly; results with vulnerabilities are saved in the ok.txt file...

F5 iControl REST - Remote Command Execution

F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...

cve-2024-38063-detection-mitigation-system

Sistema de Detección y Mitigación de Vulnerabilidades CVE Autor: Rohit Malik | Dominio: Ciberseguridad | Tipo: Proyecto Académico Grupal | Propósito: Portafolio y Educativo Resumen Este proyecto es una implementación de ciberseguridad grupal enfocada en detectar y mitigar una vulnerabilidad críti...

PT-2026-104451

Name of the Vulnerable Software and Affected Versions Zilliz Attu versions prior to 3.0.0 Description The Playground feature allows Server-Side Request Forgery SSRF, a condition where the server can be coerced into making requests to private IP addresses, effectively acting as a proxy...

CVE-2026-94483: Server-Side Request Forgery (SSRF)

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...

Linux Distros Unpatched Vulnerability : CVE-2026-94483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolutio...

Uniview IP Cameras Classic Buffer Overflow (CVE-2021-45039)

Multiple models of the Uniview IP Camera offer an undocumented UDP service on port 7788 that allows a remote, unauthenticated attacker to overflow an internal buffer and achieve code execution. By using this buffer overflow, a remote attacker can start the telnetd service. This service has a...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor Este archivo python descifrará el archivo de configuración utilizado por las cámaras hikvision vulnerables a CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Descripción Omisión de Autenticación en Cámara...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

externalip-webhook

externalip-webhook creado para abordar CVE-2020-8554 Nota: Este chart está obsoleto para la versión 1.21 de Kubernetes y no es compatible a partir de 1.22. Para mitigar CVE-2020-8554, habilita el controlador de admisión DenyServiceExternalIPs en el clúster. externalip-webhook es un webhook de...