singularity

Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...

CVE-2023-27163

Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

packetfence

PacketFence PacketFence 是什么？ PacketFence 是一个完全受支持、值得信赖的免费开源网络访问控制（NAC）系统。其功能集令人印象深刻，包括用于注册和修复的强制门户、集中式有线和无线管理、802.1X 支持、问题设备的二层隔离、与 IDS 解决方案和漏洞扫描器的集成；PacketFence 可用于有效保护网络——从小型网络到非常大的异构网络。 你想知道谁在你的网络上吗？你想基于连接者给予不同的网络访问权限吗？PacketFence 正是你所需要的！ 安装 请遵循管理指南中提供的说明。 更多信息 自上次发布以来的显著变化请参见 NEWS 文件。...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

BloodHound-Tools

¿Qué es esto? Una colección de herramientas que se integran con BloodHound. Bloodhound es el estándar de facto que tanto los equipos de seguridad azules como rojos utilizan para encontrar rutas de movimiento lateral y escalado de privilegios que potencialmente podrían ser explotadas en un entorno...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS or Windows. You have access to a remote network via ssh. You don't necessarily have admin access on th...

sshuttle

sshuttle: donde el proxy transparente se encuentra con la VPN y con ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o enrutador es Linux, FreeBSD, MacOS o Windows. Tienes acceso a una red remota a través de ssh. No necesariamente tienes...

minipwner

MiniPwner Un script para configurar un TP-Link MR3040 con OpenWRT en una simple, pero potente, "caja de paso" para pruebas de penetración. ¿Qué es el "MiniPwner"? El MiniPwner es una "caja de paso" para pruebas de penetración. Está diseñado como un dispositivo pequeño, simple pero potente que pue...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

Review.CVE-2023-5612

CVE-2023-5612 – SSRF en GitLab mediante URL de Webhook PoC y análisis 📌 Resumen del CVE CVE-ID: CVE-2023-5612 Severidad: Alta CVSS: 8.1, puntuación base Tipo: Server-Side Request Forgery SSRF Componente: Webhooks de GitLab CE/EE Versiones afectadas: GitLab CE/EE " \ --data-urlencode...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC Authentication Bypass RCE Exploit ⚠️ Critical Remote Code Execution via Authentication Bypass in Cobbler 🛠️ PoC implementation by @dollarboysushil 💡 Overview Cobbler, a Linux installation server that enables rapid setup of network installation environments, has an...

PXEThief

PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...

hikvision-unauthenticated-rce-cve-2021-36260

Vulnerabilidad RCE CVE-2021-36260 en Hikvision Descripción de la vulnerabilidad Un atacante puede aprovechar esta vulnerabilidad para obtener un control total del dispositivo mediante una shell root sin restricciones, incluso cuando el propietario del dispositivo está limitado a una shell protegi...

CVE-2023-27163

CVE-2023-27163 Request-Baskets v1.2.1 - Server-side request forgery SSRF request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, or MacOS. You have access to a remote network via ssh. You don't necessarily have admin access on the remote...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Memos 0.13.2 - Server-Side Request Forgery

SSRF vulnerabilities exist in the memos API service /o/get/httpmeta that allow unauthenticated and authenticated users to enumerate and read from the internal network. In addition, one SSRF vulnerability leads to a reflected XSS vulnerability, which may allow an attacker complete control over the...