CVE-2022-22965

CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE Checker Non-Intrusive This script looks the existence of CVE-2022-22965 Spring Framework 5.2.x / 5.3.x RCE uses a payload "/?class.module.classLoader.definedPackages%5B0%5D=0" through a GET request looking 400 code as response NON...

CVE-2025-53770-Checker

CVE-2025-53770-Checker Checks if an on-premises SharePoint server is vulnerable to CVE-2025-53770 Non-intrusive detector of the CVE-2025-53770 vulnerability in SharePoint Server Development: Division81 ethical hacking team of Grupo Oruss Technical Description CVE-2025-53770 is a critical .NET...

CVE-2024-4577

CVE-2024-4577 Fixed and minimalist PoC of the CVE-2024-4577 I just tested some PoCs for this vulnerability, and a few of them were not working correctly, so I fixed it by creating my own non-intrusive and minimalist PoC to check if you are vulnerable. How to use: python3 CVE-2024-4577.py URL...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....

regreSSHion-Checker

Auditor de Seguridad de OpenSSH regreSSHion y Fallos de 2026 Una herramienta Python ligera y no intrusiva diseñada para comprobar si servidores SSH remotos son vulnerables a exploits críticos de OpenSSH. Extrae y analiza banners SSH para detectar versiones vulnerables y considera backports de...

Exploit for CVE-2026-64638

CVE-2026-64638 — Nuclei Detection Template Template Nuclei...

AirPlay RTSP Device Discovery Scanner

The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...

WordPress Slider‑Future 1.0.5 Exposure Scanner

This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...

Exploit for Deserialization of Untrusted Data in Facebook React

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Surface & Crash Detector This tool is a non-intrusive sec...

Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification

Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...

Simplifying Azure Cloud Security with Snapshot-Based Scans

As organizations increasingly move to the cloud, securing these dynamic and transient environments has become a critical challenge for security teams. Cloud deployments are inherently more fluid than traditional infrastructure, with resources constantly being spun up, modified, or decommissioned...

The Rise of the Open Bug Bounty Project

Can you imagine launching a global bug bounty platform with almost 500,000 submissions and 13,000 researchers without consuming a cent from venture capitalists? If not, this success story is for you. The once skyrocketing bug bounty industry seems to be not in the best shape today. While prominen...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...