pd-agent

ProjectDiscovery Cloud Platform — Agente Cosa fa • Avvio rapido • Installazione • Configurazione • Scalabilità Cosa fa pd-agent ti consente di scansionare le tue proprie reti interne dalla ProjectDiscovery Cloud Platform. Installa l'agente su una macchina all'interno della rete che vuoi scansiona...

web-scanner

🌐 Strumento di Scansione Web 🌐 Sviluppato da tmrswrr Versione 1.0.0 Uno strumento completo per la Scansione di Domini Web che include Scoperta di Sottodomini, Enumerazione di Directory, Scansione di Rete e Identificazione di Siti Web. 📷 Screenshot 📷 👇 💫 Come Usare 💫 👇 📒 Leggimi 📒 L'Advanced Web...

bluekeepscan

BlueKeepScan Einfacher Wrapper über PoC von @zerosum0x0 zur Überprüfung von CVE-2019-0708 in großen Netzwerken im Multithreading. Vorbereitung Zunächst sollten Sie das Original herunterladen und installieren: root@kitploit: git clone https://github.com/zerosum0x0/CVE-2019-0708.git cd...

nibble

Nibble è uno strumento CLI per la scansione di rete locale che si concentra su velocità e facilità d'uso. Seleziona un'interfaccia di rete e scansiona la tua sottorete locale. Elenca gli host, il produttore hardware, le porte aperte e i relativi servizi. ⚡ Veloce come un fulmine, scansiona...

NetRaptor

NetRaptor - ARP-Spoofing-MITM-Tool NetRaptor ist ein GUI-basiertes ARP-Spoofing-Tool, entwickelt in Python, das es ermöglicht, ein Netzwerk zu scannen, ein Ziel und ein Gateway auszuwählen und einen Man-in-the-Middle MITM-Angriff durchzuführen. Dieses Tool ist ausschließlich für Bildungszwecke un...

natlas

Natlas Sommario Hai un sacco di mappe e stanno diventando piuttosto ingestibili. Cosa fai? Le metti in un libro e lo chiami atlante. Questo è simile, tranne per il fatto che è un sito web e una raccolta di nmap. L'obiettivo di Natlas è semplificare la scansione continua e la revisione dei dati...

natlas

Natlas Summary You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. Natlas' objective is to make it easy to perform continuous scanning and review collecte...

reachability

-- INÍCIO DO AVISO -- USE POR SUA CONTA E RISCO -- DE FORMA ALGUMA SOU RESPONSÁVEL POR QUAISQUER DANOS INCORRIDOS -- SE VOCÊ NÃO TIVER PERMISSÃO EXPLÍCITA DO PROPRIETÁRIO DA REDE, NÃO E EU REPITO NÃO EXECUTE ISSO ISTO É PYTHON ENVOLVENDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIM...

log4j-quick-scan

log4j-quick-scan Scansiona la tua rete IP e determina gli host con possibile vulnerabilità CVE-2021-44228 nella libreria log4j. Esistono strumenti molto migliori e avanzati per l'audit di sicurezza, ma molti di essi richiedono software di penetration test commerciale o servizi o software esterni ...

CVE-2022-36663-PoC

CVE-2022-36663-PoC Interner Netzwerkscanner durch blindes SSRF in Gluu IAM Gluu IAM ist anfällig für blindes SSRF, das ausgenutzt werden kann, um das interne Netzwerk auf offene Ports zu scannen, basierend auf Antwortzeiten. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 Um zu prüfen, ob das Zie...

Scanning

Schwachstellenanalyse - LAB W7 Beschreibung | ---|--- Kurscode| IKB21004 & IKB21403 Aufgabe| Dateianalyse - Scanergebnis Schwierigkeitsgrad| Mittel Kategorie| Schwachstellenbewertung, Netzwerkanalyse Verwendete Techniken| Paketanalyse, OS-Fingerprinting, Schwachstelleninterpretation, Nessus-Analy...

ivre-wizard

root@kitploit: IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| Von BitBurner ivre-wizard Ein interaktiver Wizard-Frontend für IVRE, um das Erstellen von Scans in der Datenbank zu vereinfachen. Warum? Ich habe dieses Skript erstellt, um Scans mit IVRE...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

EUVD-2026-62926

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../checkconnectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether internal hosts and ports are reachable. The...

CVE-2026-76361 Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../checkconnectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether internal hosts and ports are reachable. The...

CVE-2026-53549

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...

CVE-2026-63642

A flaw was found in MagicMirror². A remote attacker can exploit an unauthenticated Socket.IO notification in the newsfeed module by providing a malicious, unvalidated URL. This allows for Server-Side Request Forgery SSRF, enabling the attacker to identify internal network hosts and ports, and...

CVE-2026-76225

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

CVE-2026-76225

ArcadeDB before 26.8.1 has a server-side request forgery flaw in its OpenCypher LOAD CSV implementation, which does not validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the server fetch and retu...

CVE-2026-56677

9Router 0.5.4 and earlier is vulnerable to unauthenticated SSRF: the POST /api/auth/oidc/test endpoint passes a user-supplied issuerUrl to fetchOidcDiscovery() without blocking private/loopback IPs, allowing internal service scanning and reflection of OIDC discovery fields (token_endpoint, jwks_u...