log4j-log4shell-affected

log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...

awesome-lists

Security lists for SOC/DFIR detections 🐾 Threat Hunting: ThreatHunting keywords Site ThreatHunting keywords Lists ThreatHunting Yara rules ThreatHunting searches Windows Services Searches User-Agents Searches DNS Over HTTPS Searches Suspicious TLDs Searches HijackLibs Searches Phishing & DNSTWIST...

duplicut

Duplicut :scissors: Elimina rápidamente duplicados de listas de palabras masivas, sin cambiar el orden Creado por nil0x42 y colaboradores 📖 Resumen Hoy en día, la creación de listas de palabras para contraseñas generalmente implica concatenar múltiples fuentes de datos. Idealmente, las contraseña...

dymerge

Una herramienta simple pero poderosa, escrita puramente en Python, que toma listas de palabras dadas y las fusiona en un diccionario dinámico que puede usarse como munición para un ataque exitoso basado en diccionario o por fuerza bruta. Compatible con Python 2.6 y 2.7. Autor: Nikolaos Kamarinaki...

Payload-and-Polyglot-Lists

Listas de Payloads y Políglotas ¿Encontraste un payload que no funciona? Por favor abre un issue con el payload, el contexto objetivo y lo que esperabas que sucediera. Las solicitudes de extracción con correcciones o nuevos payloads siempre son bienvenidas. La investigación está en curso. Este...

PAYLOAD-LISTS

Payloads List of payloads: SSTI-injection payloads XXE payloads XSS payloads Server Side Request ForgerySSRF SQL injection payloads Open Redirect payloads NoSQL injection payloads LDAP injection payloads File inclusion payloads Command injection payloads CRLF injection payloads Code injection...

CVE-Lists

This repository does not have a README...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

intelmq

docs/index.md...

SecLists

Acerca de SecLists SecLists es el compañero del probador de seguridad. Es una colección de múltiples tipos de listas utilizadas durante evaluaciones de seguridad, reunidas en un solo lugar. Los tipos de listas incluyen nombres de usuario, contraseñas, URL, patrones de datos sensibles, payloads de...

ublockdnsclient

uBlockDNS Client uBlockDNS Client is an independent project and is not affiliated with, endorsed by, or related to uBlock Origin or its maintainer. uBlockDNS Client brings DNS-level ad and tracker blocking to your entire device. It uses community-maintained filter lists such as EasyList and...

OneListForAll

OneListForAll Listas de palabras para fuzzing web: micro curada, short/long categorizadas, y listas finales combinadas. Qué genera este repositorio onelistforallmicro.txt: lista curada mantenida manualmente. dict/short.txt: lista de palabras por categoría curada fuentes pequeñas/de calidad...

IntruderPayloads

IntruderPayloads Una colección de payloads de Intruder de Burpsuite, payloads de BurpBounty https://github.com/wagiro/BurpBounty, listas de fuzzing y metodologías de pentesting. Para descargar todos los repositorios de terceros, ejecute install.sh en el mismo directorio de la carpeta...

ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

Rukovoditel <= 3.2.1 - Cross Site Scripting

A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add". id:...

smugglefuzz

SmuggleFuzz SmuggleFuzz, un escáner de contrabando de degradación HTTP configurable y rápido. Permite a los usuarios personalizar listas de gadgets, ofreciendo una comprensión más profunda de las razones detrás de los fallos en ataques de contrabando. Estoy convencido de que numerosas...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

MalwareConfigLists

MalwareConfigLists Just some lists of Malware Configs...

EIPP

EIPP Banned Password Lists Tools for manipulating Banned Password Lists BPL of Entra ID Password Protection. The eipp-global-bpl.txt containing the entries of the global banned password list was dumped on 2024-04-11. More info at...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789466646)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789466646 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetti...