nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

psad

psad - Detección de intrusiones con registros de iptables Introducción El detector de ataques de escaneo de puertos psad es un demonio ligero del sistema escrito en Perl, diseñado para trabajar con el código de cortafuegos Linux iptables/ip6tables/firewalld para detectar tráfico sospechoso como...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

RED_HAWK

Versión 2.0.0 Por R3D@0R2H1N A.K.A Tuhinshubhra Herramienta integral para Recopilación de Información y Escaneo de Vulnerabilidades Escaneos Que Puedes Realizar Usando RED HAWK : Escaneo Básico Título del sitio NUEVO Dirección IP Detección del Servidor Web MEJORADO Detección de CMS Detección de...

Dome

DOME - Una herramienta de enumeración de subdominios Ver la versión en español Dome es un script de Python rápido y confiable que realiza un escaneo activo y/o pasivo para obtener subdominios y buscar puertos abiertos. Esta herramienta está recomendada para cazadores de bugs y pentesters en su fa...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

port-scan-automation

LazyMap - Script de Escaneo Automático con NMAP Automatiza escaneos de NMAP y políticas personalizadas de Nessus. Desarrollado por Daniel Compton https://github.com/commonexploits/port-scan-automation.git Publicado bajo AGPL, consulta LICENSE para más información Instalación git clone...

Crips

Crips IP Tools Esta herramienta es una colección de herramientas IP en línea que se pueden usar para obtener rápidamente información sobre direcciones IP, páginas web y registros DNS. Menú Consulta Whois Traceroute Consulta DNS Consulta DNS inversa Consulta GeoIP Escaneo de puertos Consulta IP...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...

nmap-farewell

nmap-farewell Esta herramienta tiene como objetivo demostrar las capacidades de la función nfnetlinkqueue del kernel de Linux. Para obtener información más detallada, puedes leer este artículo. Antes de que los paquetes sean descartados por el kernel, se envían a esta herramienta para su posterio...

log4v-vuln-check

Log4JS Escáner de Archivos y Vulnerabilidades + Escáner de Enlace de Puertos Locales Este script se utiliza para realizar una verificación rápida para ver si su servidor posiblemente está afectado por CVE-2021-44228 la vulnerabilidad log4j. No proporciona una garantía del 100 % de que no sea...

Zack-LocalScan

Zack-LocalScan English | 简体中文 Zack-Loc...

higernes

higernes Python으로 작성된 수동적 OSINT 툴킷. API 키도, 계정도, 어디에도 로깅도 없다. 핸들, 이메일, 도메인, IP, 전화번호 또는 해시를 지정하면 이미 공개된 정보를 파헤친다. 무엇을 하는가 6개의 모듈, 모두 공개 엔드포인트를 읽는다: 모듈| 얻을 수 있는 것 ---|--- username| 핸들을 약 700개 사이트WhatsMyName 데이터셋에 걸쳐 훑으며, 적중이 들어오는 대로 실시간 갱신 email| 구문, MX, 일회용 여부 검사, gravatar, 그다음 @ 앞부분을 username으로 ...

CVE-2026-84721

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

EUVD-2026-85615

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

CVE-2026-84721

A server-side request forgery (SSRF) flaw exists in the Ansible Automation Platform automation-controller email notification backend. The backend fails to validate user-supplied SMTP host and port values from notification templates against internal, loopback, or reserved addresses. An authenticat...

CVE-2026-84721 Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

CVE-2026-84721

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

PT-2026-97549

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description A server-side request forgery flaw exists in the email notification backend. The system passes the user-supplied SMTP host and port from a notificati...