CVE-2020-0688-Scanner

CVE-2020-0688-स्कैनर यह स्क्रिप्ट एक IP/रेंज/CIDR को स्कैन करती है और खोजे गए Microsoft Exchange सर्वरों और संस्करणों को आउटपुट करती है। निर्दिष्ट IP/रेंज/CIDR को masscan द्वारा पोर्ट tcp/443 पर स्कैन किया जाएगा। सफल स्कैन के बाद यह बिल्ड संस्करण प्रदर्शित करने के लिए Outlook Web Access पेज स्रोत...

sshprank

Descrizione Uno scanner di massa SSH veloce, cracker di login, raccoglitore di banner e strumento di verifica dell'autenticazione tramite password che utilizza i moduli python-masscan e shodan. Utilizzo root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / //...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

reachability

-- INÍCIO DO AVISO -- USE POR SUA CONTA E RISCO -- DE FORMA ALGUMA SOU RESPONSÁVEL POR QUAISQUER DANOS INCORRIDOS -- SE VOCÊ NÃO TIVER PERMISSÃO EXPLÍCITA DO PROPRIETÁRIO DA REDE, NÃO E EU REPITO NÃO EXECUTE ISSO ISTO É PYTHON ENVOLVENDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIM...

erl_mouse

erlmouse versione 1.1 Bene, ho migliorato diverse cose per aumentare le possibilità di trovare un dispositivo o una rete vulnerabili. La maggior parte non sono esposti pubblicamente, sono stati corretti o sono così oscuri che può essere difficile trovare un bersaglio. Tuttavia, persistiamo. Ora...

Masscan-Report

Gerador de Relatórios do Masscan Uma ferramenta Python que gera visualizações HTML interativas baseadas em React a partir da saída JSON do masscan, apresentando um gráfico de rede dirigido por força com D3.js. Captura de Tela Funcionalidades Gráfico de Rede Interativo Visualização D3.js dirigida...

fi6s

fi6s: Fast IPv6 scanner fi6s is an IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured. Please take note of the...

sshprank

Description A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module. Usage root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / / , opts | mode options -h - single host, cidr,...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

sshprank 1.7.0

sshprank is a fast SSH mass-scanner, login cracker, and banner grabber tool using the python-masscan and shodan modules...

Exploit for Improper Access Control in Oracle Http_Server

CVE-2026-21962 Concurrent WebLogic Scanner/Exploiter High-per...

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs

Cybersecurity researchers have discovered a variant of a recently disclosed campaign that abuses the TOR network for cryptojacking attacks targeting exposed Docker APIs. Akamai, which discovered the latest activity last month, said it's designed to block other actors from accessing the Docker API...

EternalBlueExploitation

Eternal Blue Exploitation Description For this project, I expl...

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for mining cryptocurrencies and renting out breached servers to third-parties. "The group is currently targeting exposed Docker daemons to deploy Sliver...

Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

An unknown attacker targeted tens of thousands of unauthenticated Redis servers exposed on the internet in an attempt to install a cryptocurrency miner. It's not immediately known if all of these hosts were successfully compromised. Nonetheless, it was made possible by means of a "lesser-known...

LiveTargetsFinder - Generates Lists Of Live Hosts And URLs For Targeting, Automating The Usage Of MassDNS, Masscan And Nmap To Filter Out Unreachable Hosts And Gather Service Information

Generates lists of live hosts and URLs for targeting, automating the usage of Massdns, Masscan and nmap to filter out unreachable hosts Given an input file of domain names, this script will automate the usage of MassDNS to filter out unresolvable hosts, and then pass the results on to Masscan to...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

SMBSR - Lookup For Interesting Stuff In SMB Shares

Well, SMBSR is a python script which given a CIDR/IP/IPfile/HOSTNAMEs enumerates all the SMB services listening 445 among the targets and tries to authenticate against them; if the authentication succeed then all the folders and subfolders are visited recursively in order to find secrets in files...

Webstor - A Script To Quickly Enumerate All Websites Across All Of Your Organization'S Networks, Store Their Responses, And Query For Known Web Technologies, Such As Those With Zero-Day Vulnerabilities

WebStor is a tool implemented in Python under the MIT license for quickly enumerating all websites across all of your organization's networks, storing their responses, and querying for known web technologies and versions, such as those with zero-day vulnerabilities. It is intended, in particular,...