14 matches found
CVE-2022-22965
CVE-2022-22965 Comprobador Nmap NSE para Spring Framework RCE CVE-2022-22965 No intrusivo Este script comprueba la existencia de la vulnerabilidad CVE-2022-22965 en Spring Framework 5.2.x / 5.3.x RCE. Utiliza el payload "/?class.module.classLoader.definedPackages%5B0%5D=0" mediante una petición G...
CVE-2025-55182-scanner
🔍 CVE-2025-55182-scanner - Detecta vulnerabilidades con facilidad Download CVE-2025-55182-scanner 🚀 Primeros pasos ¡Bienvenido! Esta guía te ayudará a descargar y ejecutar el CVE-2025-55182-scanner. Esta herramienta identifica endpoints expuestos de React Server Components en tus aplicaciones sin...
CVE-2024-4577
CVE-2024-4577 PoC corregido y minimalista de la CVE-2024-4577 Acabo de probar algunos PoCs para esta vulnerabilidad, y algunos de ellos no funcionaban correctamente, así que lo arreglé creando mi propio PoC no intrusivo y minimalista para comprobar si eres vulnerable. Cómo usar: python3...
CVE-2025-53770-Checker
CVE-2025-53770-Checker Comprueba si un servidor SharePoint on-premises es vulnerable a CVE-2025-53770 Detector no intrusivo de la vulnerabilidad CVE-2025-53770 en SharePoint Server Desarrollo: Division81 equipo de hackers éticos de Grupo Oruss Descripción técnica CVE-2025-53770 es un fallo crític...
regreSSHion-Checker
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightweight, non-intrusive Python tool designed to check if remote SSH servers are vulnerable to critical OpenSSH exploits. It extracts and parses SSH banners to detect vulnerable versions and factors in OS-specific security backports specifical...
Exploit for CVE-2026-64638
CVE-2026-64638 — Nuclei Detection Template Template Nuclei...
AirPlay RTSP Device Discovery Scanner
The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...
WordPress Slider‑Future 1.0.5 Exposure Scanner
This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...
Exploit for Deserialization of Untrusted Data in Facebook React
$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...
Exploit for Deserialization of Untrusted Data in Facebook React
RSC Surface & Crash Detector This tool is a non-intrusive sec...
Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification
Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...
Simplifying Azure Cloud Security with Snapshot-Based Scans
As organizations increasingly move to the cloud, securing these dynamic and transient environments has become a critical challenge for security teams. Cloud deployments are inherently more fluid than traditional infrastructure, with resources constantly being spun up, modified, or decommissioned...
The Rise of the Open Bug Bounty Project
Can you imagine launching a global bug bounty platform with almost 500,000 submissions and 13,000 researchers without consuming a cent from venture capitalists? If not, this success story is for you. The once skyrocketing bug bounty industry seems to be not in the best shape today. While prominen...
Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner
Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...