requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

CrackQL

CrackQL CrackQL is a GraphQL password brute-force and fuzzing utility. CrackQL is a versatile GraphQL penetration testing tool that exploits poor rate-limit and cost analysis controls to brute-force credentials and fuzz operations. Table of Contents How it works Attack Use Cases Defense Evasion...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

waymore

정보 - v8.9 waymore 의 아이디어는 기존 도구보다 Wayback Machine및 기타 소스에서 더 많은 링크를 찾는 것입니다. 👉 waymore 와 다른 도구의 가장 큰 차이점은 wayback machine및 URLScan에 있는 URL에 대해 보관된 응답을 다운로드 할 수 있어 더 많은 링크, 개발자 주석, 추가 매개변수 등을 검색할 수 있다는 점입니다. 👉 또한, 다른 도구들은 현재 소스에서 시행하는 속도 제한을 처리하지 못하며, 종종 불완전한 결과로 중단되고 사용자에게 알리지 않습니다. 버그 바운티를 하는...

batchql

BatchQL BatchQL은 GraphQL 보안 감사 스크립트로, 일괄 GraphQL 쿼리 및 뮤테이션을 수행하는 데 중점을 둡니다. 이 스크립트는 복잡하지 않으며, 개선을 환영합니다. GraphQL 일괄 처리 공격 문제 공간을 탐색할 때, 인터넷에 몇 가지 블로그 게시물이 있다는 것을 발견했지만, GraphQL 일괄 처리 공격을 수행할 도구는 없었습니다. GraphQL 일괄 처리 공격은 구현된 기능에 따라 매우 심각할 수 있습니다. 예를 들어, 이메일로 전송된 4자리 PIN을 요구하는 비밀번호 재설정 기능을 가정해 보겠습니...

EUVD-2026-87480

OpenClaw npm package 'openclaw' versions = 2026.6.6 and 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients only by the raw proxy socket address. In deployments where the SMS/Twilio webhook sits behind a trusted reverse proxy or tunn...

CVE-2026-100571 OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass

OpenClaw npm package 'openclaw' versions = 2026.6.6 and 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients only by the raw proxy socket address. In deployments where the SMS/Twilio webhook sits behind a trusted reverse proxy or tunn...

openclaw-dashboard

OpenClaw Agent Dashboard OpenClaw エージェント向けの美しく、安全で、リアルタイムな監視ダッシュボード。セッションの追跡、API 使用状況の監視、コストの表示、メモリファイルの管理、システムの健全性の把握をすべて一か所で行えます。 📸 スクリーンショット 概要| セッション| コスト ---|---|--- | | レート制限| ライブフィード| ログ ---|---|--- | | !Logshttps://assets.kitploit.com/production/public/readmes/11778/4b8b21...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2023-38545-POC

curl コマンドラインツール用 CVE-2023-38545 POC この POC は UTsweetyfish によって作成され、このリポジトリ https://github.com/UTsweetyfish/CVE-2023-38545 で公開された以前の POC に基づいています。その POC とは異なり、こちらはコマンドラインツール向けであり、libcurl ライブラリ向けではありません。また、Python やコンパイルは必要ありません この POC は curl の SOCKS5 ヒープバッファオーバーフロー用であり、curl...

DEBIAN-CVE-2026-98113

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

CVE-2026-98113

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

EUVD-2026-86944

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

CVE-2026-98113 ksmbd: rate limit unmapped SID errors

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

CVE-2026-98113

The Linux kernel contains a vulnerability in ksmbd where a client can include multiple structurally valid but unmapped SIDs in a DACL. This allows an authenticated client to generate hundreds of kernel error messages per request by triggering mapping failures, potentially leading to a kernel log ...

CVE-2026-98113 ksmbd: rate limit unmapped SID errors

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

WordPress wpForo Forum plugin 3.0.0-3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability

Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass vulnerability discovered by Usama Arshad in WordPress Plugin wpForo Forum versions 3.0.0-3.1.5...

CVE-2026-80514

The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site...

CVE-2026-80514

The wpForo Forum WordPress plugin (versions 3.0.0 through 3.1.5 ) is vulnerable to unauthenticated AI credit exhaustion . The root cause is a failure to verify the source of client-supplied IP address headers, which are used to key the per-visitor rate limit on paid AI requests. An attacker can b...