56 matches found
Logsensor
Logsensor A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility http, https Login panel scanning are done in multiprocessing so the script is super fast at scanning many urls quick tutorial & screenshots a...
meg
meg meg — это инструмент для загрузки множества URL-адресов, оставаясь при этом «вежливым» к серверам. Его можно использовать для загрузки множества путей для множества хостов; сначала загружается один путь для всех хостов, затем следующий путь, и так повторяется. Вы получаете много результатов...
logitech-ipc-protocol
logitech-ipc-protocol Документация, полученная в результате реверс-инжиниринга IPC-протокола агента Logi Options+. Обеспечивает программное управление мульти-хостовыми устройствами Logitech переключение между хостами, запросы информации об устройстве без прямого доступа к HID, как на macOS, так и...
Simple-CVE-2021-41773-checker
Простой проверщик CVE-2021-41773 Простой скрипт на bash для проверки множества хостов на CVE-2021-41773 Apache. + Использование: ./CVE-2021-41773.sh hosts.txt...
CVE-2022-1388-checker
CVE-2022-1388-checker CVE-2022-1388 F5에 대한 여러 호스트를 점검하기 위해 bash로 작성된 간단한 스크립트입니다. + 사용법: ./CVE-2022-1388.sh hosts.txt 참고 자료 https://support.f5.com/csp/article/K23605346 https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html...
FencePost
FencePost 多主机 UFW 防火墙仪表板。通过 SSH 连接 Linux 主机,解析防火墙规则和监听端口,以通俗易懂的语言进行解释,并标记安全缺口。 功能特性 多主机概览 —— 一目了然查看所有主机的 UFW 状态、默认策略和活跃服务 通俗易懂的解释 —— 每条防火墙规则都被翻译成可读的描述,包含 VLAN 和服务名称 安全缺口检测 —— 发现没有匹配 UFW 允许规则的监听端口,按外部暴露和本地暴露分类 连接诊断 —— 追踪源 IP + 目标端口经过规则链的过程,查看流量会被允许、阻止还是拒绝 变更检测 —— 将当前状态与上次快照进行比较,并将事件(规则添加/删除、UFW...
CVE-2026-85597
A flaw was found in Traefik. This vulnerability allows unauthenticated attackers to bypass client-certificate authentication. By creating conflicting Transport Layer Security TLS options on multi-host routers, attackers can exploit shared TLS resolution across multiple hostnames in a single route...
cve-2024-41110-checker
CVE-2024-41110 Проверка безопасности Docker Этот инструмент предназначен для проверки нескольких хостов на уязвимости, связанные с CVE-2024-41110 в установках Docker. Он ищет уязвимые версии Docker и использование плагинов AuthZ, которые могут привести к проблемам безопасности. Возможности Провер...
CVE-2026-85597
Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...
CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...
EUVD-2026-71020
Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution...
CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...
CVE-2026-85597 Traefik before v2.11.55 mTLS Bypass via TLS Option Conflict
Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution...
CVE-2026-85597
Traefik before v2.11.55 is affected by a TLS option conflict resolution vulnerability. When a single router rule contains conflicting TLS options across multiple hostnames, the strict mTLS (client-certificate) requirement falls back to default options for all hosts, allowing unauthenticated attac...
tomcat: Client certificate verification bypass due to virtual host mapping
A certificate validation flaw has been found in Apache Tomcat. omcat did not validate that the host name provided via the SNI extension was the same as the host name provided in the HTTP host header field. If Tomcat was configured with more than one virtual host and the TLS configuration for one ...
Authentication Bypass
Apache Tomcat is vulnerable to Authentication Bypass. The vulnerability is due to improper validation between the TLS SNI hostname and the HTTP Host header, allowing a client to send mismatched hostnames and bypass client certificate authentication in configurations with multiple virtual hosts...
Ofensive-security
This repository contains my Offensive Cyber Security / Penetrati...
Ofensive-security-Portfolio
This repository contains my Offensive Cyber Security / Penetrati...