1404 matches found
nikto
nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...
Presentations
Presentations Non uptodate list of presentations we gave at public events...
CVE-2023-22527
CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution Vulnerability in Out-of-Date Versions of Confluence Data Center and Server Advisory Release Date Tue, Jan 16 2024 01:00 EST Products: Confluence Data Center Confluence Server Affected Versions: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3...
wsvuls
WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers. What's WSVuls? WSVuls is a simple and powerful command line tool for Linux, Windows and macOS. It's designed for developers/testers and for those workers in IT who want to test vulnerabilities a...
Chuanhu Chat - Directory Traversal
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...
CVE-2024-41651
Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...
m4ngl3m3
m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
Audit-BlackBox-Web-to-Root
Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...
vulnerability-assessment
openssh-vulnerability-assessment Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities CVE-2016-0777, CVE-2015-5600 🛡️ OpenSSH...
kirjuri
Kirjuri has been deprecated. I have started a new project that covers most of the use cases that Kirjuri handles and a lot more. Check out the DFIRe case management application for all your case and evidence management needs. SECURITY UPDATE 7.5.2021 As this project has been inactive for years, i...
Vulnerability-Management
Vulnerability Management Report Prepared for: CyberTech Solutions Prepared by: Victoria Simon Date: April 10, 2024 1. Executive Summary This report details the findings from a comprehensive vulnerability assessment conducted on CyberTech Solutions' Linux infrastructure and web applications using...
Astra Linux – Vulnerability in Firefox
A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...
CVE-2026-90235
A flaw was found in the xprtsock component of the Linux kernel's sunrpc implementation. This concurrency vulnerability arises from improper synchronization when updating and reading shared socket callback pointers. As a result, a processor might use an outdated reference to a callback function...
wsvuls
WSVuls Escáner de vulnerabilidades de sitios web que detecta problemas versión de servidor desactualizada y cabeceras HTTP inseguras. ¿Qué es WSVuls? WSVuls es una herramienta de línea de comandos simple y potente para Linux, Windows y macOS. Está diseñada para desarrolladores/testers y para...
pyfiscan
pyfiscan Informazioni Pyfiscan è uno scanner gratuito di vulnerabilità e versioni per applicazioni web e può essere utilizzato per individuare versioni obsolete di applicazioni web comuni su server Linux. Un caso d'uso tipico è quello dei provider di hosting che monitorano le installazioni dei lo...
lscript
El script lazy no se ha actualizado por un tiempo debido a que he estado muy ocupado con mi vida. Intentaré subir una actualización cuando encuentre tiempo Bienvenido al script LAZY v2.1.4 Un video hecho por Hackersploit : https://www.youtube.com/watch?v=oBpo5sElrMY Un video hecho por sstec:...
crapsecrets
Forked originariamente da badsecrets 0.7.0 Sincronizzato occasionalmente fino a marzo 2025! Obsoleto con alcuni moduli e casi di test non aggiornati! Buono per il test di Machine Key ASP.NET compromesse! Questo è CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone...
Glances Outdated._load_cache() Code Execution
The vulnerability of the Outdated.loadcache function in the glances/outdated.py monitoring tool is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
