Lucene search
+L

308 matches found

Kitploit
Kitploit
added 2026/09/02 4:14 p.m.3 views

Crips

Crips IP Tools This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Menu Whois lookup Traceroute DNS Lookup Reverse DNS Lookup GeoIP Lookup Port Scan Reverse IP Lookup INSTALL & UPDATE Exit Whois lookup Determine...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 3:18 p.m.40 views

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 12:34 p.m.94 views

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 12:34 p.m.6 views

nmap-farewell

nmap-farewell このツールは、Linuxカーネルのnfnetlinkqueue機能の能力を実証することを目的としています。 より詳細な情報については、この記事をお読みください。 パケットがカーネルによってドロップされる前に、それらはさらなる処理のためにこのツールに送信されます。 リモートピアがマシン上の多数のクローズドポートに到達しようとした場合、そのIPアドレスのドロップステートメントをネットワークスタックの非常に早い段階(パケットのデフラグメンテーションや接続追跡が行われる前)に挿入することで、自動的に禁止されます。...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 11:14 a.m.23 views

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 5:30 a.m.2 views

psad

psad - iptablesログによる侵入検知 はじめに ポートスキャン攻撃検出器 psad は、Linux iptables/ip6tables/firewalld...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 3:27 a.m.4 views

RED_HAWK

Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 11:10 p.m.8 views

port-scan-automation

LazyMap - 自動NMAPスキャンスクリプト NMAPスキャンとカスタムNessusポリシーを自動化します。 Daniel Compton 開発 https://github.com/commonexploits/port-scan-automation.git AGPLのもとで公開されています。詳細はLICENSEを参照してください。 インストール root@kitploit: git clone https://github.com/commonexploits/port-scan-automation.git 使用方法 root@kitploit: ./lazymap.sh ...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 10:46 p.m.31 views

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 9:47 p.m.3 views

log4v-vuln-check

Log4JS ファイル&脆弱性スキャナー + ローカルポートバインドスキャナー このスクリプトは、サーバーが CVE-2021-44228(log4j の脆弱性)の影響を受ける可能性があるかどうかを高速にチェックするために使用されます。 脆弱性がないことを100%保証するものではありませんが、脆弱性の可能性があるかどうかのヒントを提供します。 機能: apt リポジトリを更新 "sudo apt-get update -y" (無効、必要に応じてコメント解除) スクリプトの依存関係をインストール "sudo apt-get install lsof unzip locate mlocat...

10CVSS7AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/09/01 7:37 p.m.4 views

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 6:14 p.m.403 views

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

5.6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/20 9:35 p.m.34 views

CVE-2026-72860 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl from src/shared/utils/ssrfGuard.js. That guard compares hostname strings only: it resolves no DNS, does not revalidate...

8.5CVSS0.00218EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/18 11:19 a.m.21 views

CVE-2026-74905 SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan before v3.7.4 contains a server-side request forgery SSRF vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does n...

7.1CVSS0.00317EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/21 5:01 p.m.64 views

-vsftpd-exploit-lab

🎯 vsftpd 2.3.4 Backdoor Exploit — Lab Report Date: 21 J...

10CVSS8.2AI score0.96184EPSS
SaveExploits47
OSV
OSV
added 2026/07/06 8:03 a.m.9 views

PYSEC-2026-814 OpenStack Glance Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to...

5.8CVSS6AI score0.02051EPSS
SaveExploits0References9
NVD
NVD
added 2026/06/19 8:16 p.m.21 views

CVE-2026-49345

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery SSRF vulnerability exists in Mercator's CVE configuration panel /admin/config/parameters. The testProvider method in ConfigurationController passes...

5.3CVSS0.00634EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:38 p.m.20 views

CVE-2026-34225

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided U...

4.3CVSS5.4AI score0.00292EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/19 12:51 a.m.40 views

CVE-2026-33234

CVE-2026-33234 affects AutoGPT versions 0.1.0–0.6.51, where SendEmailBlock accepts user-provided smtp_server and smtp_port and passes them to Python’s smtplib.SMTP() without IP address validation. This bypasses hardened SSRF protections (validate_url_host and BLOCKED_IP_NETWORKS) used by other bl...

5CVSS5.9AI score0.00304EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/20 12:30 a.m.16 views

Server-side Request Forgery (SSRF)

Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...

8.1CVSS6.5AI score0.00534EPSS
SaveExploits1References2
Rows per page
Query Builder