dorkbot

dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...

webscreenshot

webscreenshot 説明 ウェブサイトのリストをスクリーンショットするシンプルなスクリプトです。url-to-image PhantomJS スクリプトをベースにしています。 特徴 AJAX リソースのための url-to-image の「レイジーレンダリング」を統合 Windows および Linux システムで完全に機能 PhantomJS レンダラー向け Cookie およびカスタム HTTP ヘッダー定義のサポート マルチプロセッシングと、ユーザー定義可能なタイムアウト後の応答しないプロセスの強制終了 入力ターゲットとして複数の形式を受け入れ...

N4xD0rk

N4xD0rk Listing subdomains about a main domain using the technique called Hacking with search engines. Instalation You can download the latest version of N4xD0rk by cloning the GitHub repository: root@kitploit: git clone https://github.com/n4xh4ck5/N4xD0rk.git Install the dependencies via pip:...

XXRF-Shots

What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...

erlvulnscan

基于Web的并发扫描器，用于CVE-2015-1635。 此处运行实际实现。此演示网站用于该项目的开发，其稳定性不保证。 关于此项目的信息在此处编写。由于其中记录的“待办事项”列表已完成，该代码现已处于稳定状态。 代码文档可在此处找到。 开发与部署 克隆仓库 root@kitploit: git clone https://github.com/technion/erlvulnscan.git 获取依赖 root@kitploit: ./rebar3 get-deps 编译 root@kitploit: ./rebar3 compile 静态分析 root@kitploit:...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

Malicious Package

Overview ig-phantomjs-binaries is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2019-0222

Malware in sbrugna...

EUVD-2019-0350

Malware in sbrugna...

EUVD-2019-0292

Malware in sbrugna...

EUVD-2021-1113

Malware in sbrugna...

EUVD-2022-5707

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-17221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-29114 Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...

MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ig-phantomjs-binaries (npm)

--- -= Per source details. Do not edit below this line.=-...

yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...

GHSA-3V33-3WMW-3785 yt-dlp has dependency on potentially malicious third-party code in Douyu extractors

Impact yt-dlp's DouyuTV and DouyuShow extractors used a cdn.bootcdn.net URL as a fallback for fetching a component of the crypto-js JavaScript library. When the Douyu extractor is used, yt-dlp extracts this JavaScript code and attempts to execute it externally using PhantomJS. bootcdn.net is owne...