60 matches found
ApplicationInspector
Introdução Microsoft Application Inspector é uma ferramenta de caracterização de código-fonte de software que ajuda a identificar características de codificação de componentes de software de primeira ou terceira parte com base em chamadas de bibliotecas/APIs conhecidas e é útil em casos de uso de...
jsleak
Descrição Eu estava desenvolvendo o jsleak durante a maior parte do meu tempo livre para minha própria necessidade. É uma ferramenta de linha de comando fácil de usar projetada para descobrir segredos e links em arquivos JavaScript ou código-fonte. O jsleak foi inspirado por Linkfinder e as regex...
pmg
pmg URLs से पैरामीटर/पथ निकालें उपयोग : $ cat urls.txt | python3 PmG.py परिणाम परिणाम सहेजें $ cat urls.txt | python3 PmG.py ResultsFile.txt यहाँ आप regex का उपयोग करके अधिक पैरामीटर/पथ जोड़ सकते हैं :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...
git-secrets
============= git-secrets Impede que você faça commit de senhas e outras informações sensíveis em um repositório git. .. contents:: :depth: 2 Sinopse :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force...
dismember
🔪 Dismember Dismember é um conjunto de ferramentas de linha de comando para Linux que pode ser usado para escanear a memória de todos os processos ou de processos específicos em busca de segredos comuns e expressões regulares personalizadas, entre outras coisas. Ele eventualmente se tornará um ki...
endext
EndExt EndExt é uma ferramenta .go para extrair todos os endpoints possíveis dos arquivos JS Ideia Quando você rastreia todos os arquivos JS do waybackruls, por exemplo, ou até mesmo coleta as URLs dos arquivos JS da página inicial do site alvo... Se o site estiver usando um sistema de API e você...
fuzzdb
تم إنشاء FuzzDB لزيادة احتمال اكتشاف ثغرات أمنية في التطبيقات من خلال الاختبار الأمني الديناميكي للتطبيقات. إنه أول وأشمل قاموس مفتوح لأنماط حقن الأعطال، ومواقع الموارد المتوقعة، والتعبيرات النمطية لمطابقة استجابات الخادم. أنماط الهجوم - يحتوي FuzzDB على قوائم شاملة لـ حمولات الهجوم الأولية لاختب...
warcannon
WARCannon - معالجة متوازية قوية بشكل كارثي لـ WARC تم بناء WARCannon لتبسيط وتقليل تكلفة عملية 'البحث في الإنترنت'. مع WARCannon، يمكنك: بناء واختبار أنماط التعبيرات العادية regex ضد بيانات Common Crawl الحقيقية تحميل مجموعات بيانات Common Crawl بسهولة للمعالجة المتوازية توسيع قدرات الحوسبة لمعال...
log4j-scanner-CVE-2021-44228
log4j-scanner CVE-2021-44228 संपूर्ण निर्देशिकाओं में CVE-2021-44228 के प्रयासों को स्कैन करने के लिए सरल उपकरण फ़िल्टर को बायपास करने के तरीके हमेशा मौजूद होते हैं, यही बात regex पैटर्न पर भी लागू होती है।...
git-vuln-finder
git-vuln-finder git कमिट संदेशों से संभावित सॉफ़्टवेयर कमज़ोरियाँ ढूँढना। आउटपुट प्रारूप JSON है जिसमें संबंधित कमिट शामिल है जिसमें सॉफ़्टवेयर कमज़ोरी के संबंध में एक फिक्स हो सकता है। खोज केवल कमिट संदेशों के विरुद्ध नियमित अभिव्यक्तियों के एक सेट पर आधारित है। यदि CVE IDs मौजूद हैं, तो वे...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
secret-regex-list
Liste d'expressions régulières pour secrets Liste d'expressions régulières pour extraire les clés API secrètes et les informations sensibles. Vous pouvez copier ceci directement et l'intégrer dans votre code Python ; certaines expressions régulières peuvent nécessiter trois guillemets, sinon cela...
CVE-2026-70493
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built-in knowledge search path in backend/openwebui/tools/knowledgefs.py and backend/openwebui/tools/builtin.py let a chat participant choose a pattern used to grep knowledge files...
CVE-2025-71395
SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations,...
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input validation. The utility intended to secure this evaluation did so incorrectly, and did not fully cover all places in which evaluation was being done. An attacker can send a resource...
CVE-2025-71379
A flaw was found in vLLM. Multiple regular expression denial of service ReDoS vulnerabilities exist in versions greater than or equal to 0.6.3 and less than 0.9.0. An attacker can exploit this by submitting crafted input with nested or repeated structures to specific regex patterns within vLLM,...
PT-2026-25984
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.19 and 8.6.43, a remote attacker can crash the Parse Server by subscribing to a LiveQuery with an invalid regular expression pattern. The server process terminates when the...
CVE-2026-22041
Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...
CLSA-2025-1764324770 Fix CVE(s): CVE-2022-30688
SECURITY UPDATE: insecure regex patterns for interpreter detection - debian/patches/CVE-2022-30688.patch: prevent local privilege escalation by anchoring interpreter regex patterns - CVE-2022-30688...
