pagodo

pagodo - Dorking Pasivo de Google Introducción pagodo automatiza la búsqueda en Google de páginas web y aplicaciones potencialmente vulnerables en Internet. Reemplaza la realización manual de búsquedas de dorks de Google con un navegador web con interfaz gráfica. Hay 2 partes. La primera es...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

CVE-2024-4577

CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...

CVE-2022-22947

Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage main -u http://127.0.0.1:8080 Using proxy main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...

FGscanner

Escáner de URL FantaGhost 1.1 Fecha de publicación: 2014/02/05 Escáner avanzado de directorios web con soporte para proxy y TOR Acerca de FGscanner es un escáner avanzado de directorios web de código abierto. Encuentra contenido oculto en un servidor web mediante un ataque de tipo diccionario. El...

dnschan

dnschan This is a trojan that runs over DNS. You can: handle multiple agents very slowly upload files fetch files from the web run processes...

Vite-CVE-2025-30208-Scanner

An automated tool for detecting Vite CVE-2025-30208 vulnerability, supporting batch scanning and result saving. Features ✅ Colored terminal output ✅ Batch target scanning file import supported ✅ Multi-threaded concurrent detection adjustable thread count ✅ Automatic saving of vulnerability result...

Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy For communication and learning purposes only...

CVE-2025-30208_POC

Escaneo sin proxy python3 poc.py -f urls.txt Escaneo con proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...

cve-2023-22515-exp

cve-2023-22515-exp Script de explotación en Python para cve-2023-22515 Parámetros: -h, --help show this help message and exit -H HOST, --host HOST 指定url -U USERNAME, --username USERNAME 指定用户名 -PW PASSWORD, --password PASSWORD 指定密码 -E EMAIL, --email EMAIL 指定邮箱 -P PROXIES, --proxies PROXIES 指定代理...

ActiveMQ_RCE_Pro_Max

ActiveMQRCEGUI Versión mejorada, abreviada como Pro Max Versión v1.0.3 Añadida detección de versión Añadida verificación de versiones vulnerables v1.0.2 Añadido proxy Eliminado el botón Help...

CVE-2025-5287

Descripción: Es un código de exploit que funciona para múltiples URLs y múltiples hilos para inyección SQL no autenticada en un plugin de WP con CVE-2025-5287 Ejemplo de uso: usage: CVE-2025-5287.py -h --file FILE --fudge FUDGE --timeout TIMEOUT --threads THREADS --proxy PROXY Comprobador de SQLi...

CVE-2018-7600

CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...

CVE-2021-40438-POC

Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess. CVE-2021-40438 - SSRF Exploit ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...

cve-2023-37635

CVE-2023-37635 - Guía de explotación Instalación y configuración 1️⃣ Instalar dependencias pip install -r requirements.txt 2️⃣ Ejecutar el exploit Con un proxy: python brutForc.py Sin proxy: python brutForc.py -n Notas: Reemplaza con la URL objetivo. La opción -n desactiva el uso del proxy. ⚠️...

Malicious code in new-native-tools-linux-x64-gnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38b165a8872e9c65dab5b230d8a4cc26e045f5fc3fd8502fd711652913af44a The package ships a single 10 MB Rust-compiled Linux x8664 N-API native module tools.linux-x64-gnu.node referenced by main, with a two-line README th...

MAL-2026-12402 Malicious code in new-native-tools-linux-x64-gnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38b165a8872e9c65dab5b230d8a4cc26e045f5fc3fd8502fd711652913af44a The package ships a single 10 MB Rust-compiled Linux x8664 N-API native module tools.linux-x64-gnu.node referenced by main, with a two-line README th...

Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with 'ProxyManager', the 'Proxy-Authorization' header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

[SECURITY] Fedora 43 Update: wget1-1.25.0-3.fc43

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...