Breacher

Breacher 一个用于查找管理员登录页面和EAR漏洞的脚本。 功能特性 按需多线程 大型路径列表（482条路径） 支持 php、asp 和 html 扩展名 检查潜在的EAR漏洞 检查 robots.txt 支持自定义路径 使用方法 检查所有 php 扩展名的路径 root@kitploit: python breacher -u example.com --type php 使用线程检查所有 php 扩展名的路径 root@kitploit: python breacher -u example.com --type php --fast 不使用线程检查所有路径...

dirstalk

Dirstalk Dirstalk 是一个多线程应用程序，旨在对Web服务器上的路径进行暴力破解。 该工具包含的功能与 dirbuster 和 dirb 所提供的类似。 下面是它的实际使用演示： 目录 如何使用 扫描 实用资源 字典生成器 下载 开发 许可证 ↑ 如何使用 该应用程序自带文档，运行 dirstalk -h 将返回所有可用命令及其简短描述，您可以通过执行 distalk -h 获取每个命令的帮助信息。 例如 dirstalk result.diff -h 扫描 要执行扫描，您至少需要提供一个字典和一个URL： root@kitploit: dirstalk scan...

wordlists

Wordlists Listas de palabras reales de seguridad informática, actualizadas periódicamente Listas de palabras actuales Tecnologías Estas listas de palabras se basan en el código fuente de los CMS/servidores/frameworks enumerados aquí. Las listas de palabras actuales incluyen: Wordpress Joomla Drup...

ThreatMapper

ThreatMapper - 云原生的运行时威胁管理与攻击路径枚举 !注意 本项目由 https://threatmapper.org 维护 Deepfence ThreatMapper 在你的生产平台中搜寻威胁，并根据其利用风险对这些威胁进行排名。它能发现脆弱的软件组件、暴露的密钥以及偏离良好安全实践的行为。ThreatMapper 结合基于代理的检测与无代理监控，提供最广泛的覆盖范围以检测威胁。 借助 ThreatMapper 的 ThreatGraph 可视化功能，你可以识别出对应用程序安全构成最大风险的问题，并优先安排计划内的防护或修复措施。 在产品文档中了解更多关于...

rbuster

Rbuster 另一个目录爆破工具 常用命令行选项 -a - 指定发送请求时使用的用户代理字符串 -c - 指定可能需要的任何 cookie（模拟认证）。header。 -f - 强制处理存在通配符结果的域名。 -l - 显示响应的长度。 -r - 跟随重定向。 -s - 逗号分隔的状态码列表，视为"正向"结果（默认：200,204,301,302,307）。 -u - 完整 URL（包含协议），或基础域名。 -v - 详细输出（显示所有结果）。 -w - 用于暴力破解的字典文件路径。 -b - 通过 Bearer token 进行 HTTP 授权。 -P - HTTP...

CVE-2024-45440

Herramienta de enumeración para CVE-2024-45440 por DividesByZer0 & c0d3Ninja CVE-2024-45440 - PoC de Divulgación de Ruta Completa en Drupal 11.x-dev opciones: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL única para escanear. -f FILE, --file FILE Archivo que contiene URLs...

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-47680 Source controller: Improper path handling allows traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-12624

Vault’s ACL policy engine did not consistently enforce a wildcard glob deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enumerate the names of entries beneath a path it was...

CVE-2026-56671

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-56671 ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read

ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-53422

A flaw was found in Erlang OTP's Secure Shell SSH component, specifically within the SSH File Transfer Protocol SFTP daemon's sshsftpd module. An authenticated SFTP user can exploit an observable response discrepancy in the REALPATH handler to enumerate the existence of files and directories...

EUVD-2026-41410

Observable Response Discrepancy vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSHFXPREALPATH handler in sshsftpd calls relatefilename/3 with Canonicalize=false, unlik...

Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to version 22.22.2. CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. CVE-2026-21716: incomplete fix for CVE-2024-36137...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through improper validation of user-supplied paths in the prefixed function. An attacker can read or write arbitrary files, create directories, and enumerate files outside the intended root directory by sending...

EUVD-2026-17178

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...