bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

cve-2024-37763

説明 MachFormのバージョン19までが、認証されていない格納型クロスサイトスクリプティングの影響を受けます。これにより、有効なセッションを持つユーザーがフォームの結果を閲覧する際に影響を受けます。 対象のWebアプリケーションでは、テキスト署名が有効になっているフォームを使用する場合、脆弱なリソースへのリクエストがXSS攻撃を受けることが判明しました。脆弱なURL内のPOSTリクエストのボディパラメータがサニタイズされておらず、悪意のあるペイロードが埋め込まれ、被害者のブラウザでJavaScriptコードがトリガーされる可能性があります。 リスク 深刻度: 中 CVSS v3.1...

startpage-parser

startpage-parser 从 startpage 搜索引擎（基于 google.com 的结果）解析搜索结果 你可以使用它来获取一些结果，同时避免被 Google 封禁 安装 通过 pip root@kitploit: $ pip install startpage-parser 从源码 root@kitploit: $ git clone https://github.com/knassar702/startpage-parser $ cd startpage-parser $ pip install -e . root@kitploit: from startpage...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

ma2tl

ma2tl macapt to timeline This is a DFIR tool for generating a macOS forensic timeline from the analysis result DBs of macapt. Requirements Python 3.7.0 or later pytz tzlocal xlsxwriter Installation root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git Usage root@kitploit: % python...

Nix-Auditor

Nix Auditor Auditoría CIS más fácil RHEL, CentOS Uso: 1. Hágalo ejecutable ...ej. chmod +x filename 2. Ejecútelo. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Registro de cambios - Créditos a Metale Se agregaron variables de color BLUE, RED, N...

WordPress Easy Student Results <=2.2.8 - Improper Authorization

WordPress Easy Student Results plugin through 2.2.8 is susceptible to information disclosure. The plugin lacks authorization in its REST API, which can allow an attacker to retrieve sensitive information related to courses, exams, and departments, as well as student grades and information such as...

WordPress JoomSport <5.2.8 - SQL Injection

WordPress JoomSport plugin before 5.2.8 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operation...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox vor V-9.2.1 ist anfällig für CSV-Makro-Injection. Produktbeschreibung: SearchBlox vereinfacht die Unternehmenssuche für komplexe Organisationen. Die intuitiven und intelligenten Tools von SearchBlox bieten eine sofort einsatzbereite Einrichtung, sicher...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

nmap-scan-results

Scansione Nmap: Oltre 200 Vulnerabilità Trovate Critico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Rapporto completo...

CVE-2019-15107

CVE-2019-15107 Dies sind Informationen zur Webmin-Sicherheitslücke CVE-2019-15107, bei der ich einen eigenen Server aufgebaut und die Angriffsergebnisse dokumentiert habe...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...