subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

metasploit-framework

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

recog

Recog: 認識フレームワーク Recogは、さまざまなネットワークプローブから返されるデータに対してフィンガープリントをマッチングすることで、製品、サービス、オペレーティングシステム、ハードウェアを識別するためのフレームワークです。Recogを使用すると、Webサーバーのバナー、SNMPシステム記述フィールド、その他多数から有用な情報を簡単に抽出できます。 Recogはオープンソースです。詳細については、LICENSEファイルを参照してください。 目次 1. リポジトリの分割 1. デフォルトブランチの名称変更 2. Recogライブラリの言語実装 1. 機能の同等性 3. インスト...

at-doom-fortigate

At Doom Fortigate ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||. . . . . . . ||...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

metasploitable3

Metasploitable3 Metasploitable3는 다양한 보안 취약점을 포함하여 처음부터 구축된 VM입니다. metasploit을 이용한 익스플로잇 테스트 대상으로 사용하도록 고안되었습니다. Metasploitable3는 BSD 스타일 라이선스로 배포됩니다. 자세한 내용은 COPYING을 참조하세요. 빠른 시작 https://app.vagrantup.com/rapid7/ 에서 제공하는 미리 빌드된 이미지를 사용하려면 새로운 로컬 metasploitable 워크스페이스를 생성하세요: Linux 사용자: mkdir...

CVE-2026-55040

Microsoft SharePoint JWT 認証バイパス CVE-2026-55040 概要 CVE-2026-55040.py は、SharePoint の認証バイパス脆弱性 CVE-2026-55040 を悪用するための概念実証 PoC スクリプトです。 詳細な技術分析については、当社の Rapid7 Analysis を参照してください。 使用方法 $ python CVE-2026-55040.py --help usage: CVE-2026-55040.py -h --target TARGET --host HOST --x5t X5T --realm REALM...

pentest-lab-metasploitable2

隔离网络中的渗透测试实验室 作者： Daniel Stefan de Jesus dos Reis 日期： 2026年9月 环境： 隔离虚拟网络 pentestlab 中的个人 KVM 实验室 范围与授权声明 本次测试仅针对一台自有且故意存在漏洞的虚拟机 进行，该虚拟机由 Rapid7 专门分发用于攻击性安全培训，位于一个无互联网出口的隔离虚拟网络中。未访问任何第三方系统。本项目仅用于教育目的，旨在培养入侵测试技能。 1. 实验室架构 Hypervisor： KVM/libvirt 虚拟网络： pentestlab（网桥 virbr-lab），子网 192.168.100.0/24，未配...

CVE-2026-97228

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

EUVD-2026-86930

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

CVE-2026-97228 Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

CVE-2026-97228 Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

CVE-2026-97228

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 are vulnerable to a GraphQL query injection in the export-status component. Specifically, the get_export_status function in src/export_manager.py fails to validate the export_id argument, which is received via the check_rapid7_export_status and ...

CVE-2026-97228 Rapid7 Bulk Export MCP — GraphQL Query Injection in Export Status Lookup

Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component getexportstatus in src/exportmanager.py, whereby the exportid value — an unvalidated MCP tool argument reaching the function via the checkrapid7exportstatus and...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

CVE-2026-89325

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-89325 Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-89325 Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

EUVD-2026-86404

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-89325

The Rapid7 Insight Agent on Windows is vulnerable to local privilege escalation due to an uncontrolled search path element in InsightVM assessment content. Assessment content at or below version 0.0.261.0 invoked the code command without a fully qualified path from a process running as SYSTEM . A...