bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

CVE-2019-17662

CVE-2019-17662 修改了CVE代码 使用了 Prepared Requests，因为 python3 requests 模块会规范化URL中的 ../，例如： 代码如下： root@kitploit: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode 结果如下： root@kitploit: GET /test HTTP/1.1 Host: 123.123.123.123 Connection: close Accept-Encoding: gzip,...

forbidden

Forbidden 绕过 4xx HTTP 响应状态码及更多。 该工具基于 Python Requests、PycURL 和 HTTP Client。 在 Kali Linux v2024.2（64 位）上测试。 仅用于教育目的。希望能有所帮助！ 未来计划： 添加 silent 选项以抑制控制台输出。 添加 no color 选项以禁用彩色控制台输出。 添加对 hop-by-hop HTTP 请求头的测试。 添加对 User-Agent HTTP 请求头的测试。 添加对 HTTP cookies 的测试。 添加对 HTTP 走私的测试。 添加对 CRLF 的测试。 添加对 Log4j...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

CVE-2022-22947

CVE-2022-22947 Exp 此漏洞似乎并不总是复现。 python3 requests...

exploit-writing-for-oswe

Escritura de Exploits para OSWE Antecedentes Qué Este repositorio contiene una lista de fragmentos de código snippets y consejos útiles relacionados con la escritura de scripts de exploits en los laboratorios y el examen de certificación OSWE. Algunos ejemplos aquí pueden ir en contra de ciertas...

POC-CVE-2023-32681

CVE-2023-32681 的 PoC 这是 CVE-2023-32681 的 Python 3 实现，影响使用 requests 版本 = 2.30.0 的客户端。 根据 https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4，每当服务器发出 3xx 重定向时，用户代理应修改请求，删除请求中的某些头部和字段。 这些字段的详细信息可参见 https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4-5。针对该 CVE，我在此高亮显示了相关部分。 requests 版本 = 2.30...

Sharepoint-cve-2023-29375-incident-response

Análisis de Incidente SOC: Elevación de Privilegios en Microsoft SharePoint Server CVE-2023-29375 Una investigación de seguridad en profundidad de un intento crítico de explotación y enumeración dirigido a un servidor de Microsoft SharePoint. Resumen del Incidente Nombre de la alerta: SOC227 -...

CVE-2024-21644-Poc

poc de CVE-2024-21644 Instalar módulos: pip install requests pip.install colorama...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

EulerOS Virtualization 2.12.0 : python-requests (EulerOS-SA-2026-2800)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2623)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2563)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP15 : python-requests (EulerOS-SA-2026-2465)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

GHSA-6H9P-93HQ-Q7H6 PraisonAI: SpiderTools redirect-target SSRF protection bypass

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrapepage validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

EulerOS Virtualization 2.13.0 : python-requests (EulerOS-SA-2026-2417)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS Virtualization 2.13.1 : python-requests (EulerOS-SA-2026-2388)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

openSUSE 16 Security Update : python-requests (openSUSE-SU-2026:20926-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20926-1 advisory. This update for python-requests fixes the following issue: - CVE-2026-25645: extractzippedpaths uses predictable filenames when extracting files from zi...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2313)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2356)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...