753 matches found
CVE-2024-44902-env
CVE-2024-44902 - ThinkPHP असुरक्षित डिसीरियलाइज़ेशन आरसीई असुरक्षित वातावरण nuclei-templates सत्यापन के लिए। भेद्यता विवरण...
CVE-2025-31324
CVE-2025-31324 كيف تعمل طريقة الكشف هذه؟ يقوم القالب بإرسال طلب HTTP GET إلى عنوان URL الأساسي للهدف ويفحص ترويسات الاستجابة لتحديد مثيلات SAP NetWeaver Application Server. تساعد هذه المعلومات في تقييم ما إذا كان النظام قد يكون عرضة لـ CVE-2025-31324. كيف أقوم بتشغيل هذا السكربت؟ 1. قم بتنزيل...
CVE-2025-26466
CVE-2025-26466 यह पहचान विधि कैसे काम करती है? यह टेम्पलेट निम्नलिखित कमजोर संस्करणों से मेल खाता है: root@kitploit: - "SSH-2.0-OpenSSH9.5p1" - "SSH-2.0-OpenSSH9.6p1" - "SSH-2.0-OpenSSH9.7p1" - "SSH-2.0-OpenSSH9.8p1" - "SSH-2.0-OpenSSH9.9p1" यदि कोई मेल मिलता है, तो होस्ट को CVE-2025-26466 के प्र...
CVE-2025-53690-POC
Sitecore गंभीर डिसीरियलाइज़ेशन RCE CVE-2025-53690 POC और Nuclei टेम्पलेट संक्षिप्त सारांश यह रिपॉजिटरी CVE-2025-53690 Sitecore के लिए एक डिटेक्शन टेम्पलेट और सहायक सामग्री होस्ट करता है। शामिल Nuclei टेम्पलेट उन Sitecore इंस्टेंसेस को स्कैन करने में मदद करता है जो इस तरह कॉन्फ़िगर किए गए प्रतीत...
React2Shell
React2Shell Scanner et kit d'exploitation pour CVE-2025-55182 — RCE sur les Server Components Next.js/React. Structure du dépôt root@kitploit: React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └──...
CVE-2026-8037-POC
CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...
react2shell-PoC
React2Shell قالب Nuclei للكشف عن React2Shell CVE-2025-55182 و CVE-2025-66478...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
CVE-2024-23692-EXP
CVE-2024-23692-EXP root@kitploit: bash CVE-2024-23692.sh Nuclei root@kitploit: nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...
Oneliner-Bugbounty
Oneliner-Bugbounty مجموعة سكربتات من سطر واحد لصيد الثغرات قائمة الأدوات Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro الماسح التلقائي root@kitploit: subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates...
cent
قوالب nuclei لإصدار المجتمع، أداة بسيطة تتيح لك تنظيم جميع قوالب Nuclei التي يقدمها المجتمع في مكان واحد. التثبيت root@kitploit: go install -v github.com/xm1k3/cent/v2@latest أو نزّلها من الإصدارات بعد التثبيت، قم بتشغيل cent init لتهيئة cent مع ملفات الإعداد التي تجدها...
CVE-2025-24893-EXP
CVE-2025-24893-EXP Affected Versions xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki Platform Exploit usage: python CVE-2025-24893.py -u -c...
Nuclei-TemplatesNuclei-Templates-CVE-2017-17736
Nuclei-TemplatesNuclei-Templates-CVE-2017-17736...
missing-cve-nuclei-templates
Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 167758 CVEs missing : 66838...
My-Presentation-Slides
My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...
CVE-2025-26399
CVE-2025-26399 Como funciona este método de deteção? Este script deteta instâncias do SolarWinds Web Help Desk vulneráveis ao CVE-2025-26399 ao solicitar a página de login do Helpdesk, confirmar identificadores do produto na resposta, extrair o token de compilação incorporado como uma string de...
fuzzing-templates
Modelli di Fuzzing Elenco curato dalla comunità di modelli di fuzzing per il motore nuclei per individuare vulnerabilità di sicurezza sconosciute. Documentazione • Contributi • Discussione • Comunità !Caution Questo repository è archiviato e incorporato nel progetto nuclei-templates nella directo...
recon-ninja
recon-ninja Lo strumento è un repository GitHub che fornisce uno strumento di ricognizione recon che consente di caricare la scoperta dei tuoi domini tramite un'opzione di upload. Lo strumento utilizza HTTPX, un tool che esegue la scansione dei domini attivi. Lo strumento dispone anche di un...
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...