Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

surf

Surf - Escala tus vulnerabilidades SSRF en entornos cloud modernos surf te permite filtrar una lista de hosts, devolviendo una lista de candidatos SSRF viables. Lo hace enviando una petición HTTP desde tu máquina a cada host, recogiendo todos los hosts que no respondieron y luego filtrándolos en...

CVE-2026-33712

CVE-2026-33712 - Typebot Unauthenticated SSRF Description Typebot = 3.15.2 fixed in 3.16.0 contains an unauthenticated Server-Side Request Forgery SSRF vulnerability in the preview chat endpoint. Endpoint: POST /api/v1/typebots/typebotId/preview/startChat The preview endpoint accepts a...

N1QLMap

Descripción N1QLMap es una herramienta de explotación de N1QL. Actualmente funciona con la base de datos Couchbase. La herramienta soporta la extracción de datos y la realización de ataques SSRF a través de CURL. Se puede encontrar más información aquí:...

CVE-2023-25203

CVE-2023-25203: Application vulnerable to SSRF Server Side Request Forgery attacks Description CVE-2023-25203 identifies a vulnerability within the Therefore solution, which is susceptible to Server-Side Request Forgery SSRF attacks due to its use of Aspose software for converting uploaded files...

CVE-2021-22986

CVE-2021-22986 F5 BIG-IP/BIG-IQ iControl Rest API SSRF to RCE Usage: root@kitploit: python CVE-2021-22986.py...

emby_ssrf

msfemby This tool will check a remote EMBY server to attempt to use an SSRF vulnerability to perform an http scan of the network internal to the EMBY server. This is based on the vulnerability CVE-2020-26948. Installation Clone the repo and put the rb files into the...

CVE-2023-27163

CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets up to v1.2.1 Usage example myscript.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27 -i victim server IP -f IP or address to direct connections produced by the SSRF -t in this option goes your local IP or attacker IP, for generating the...

CVE-2022-41040-POC

CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF in Microsoft Exchange Server Manual exploiation 1. Replace COLLABHERE with your OOB domain - sed 's/COLLABHERE//g 2. Add payloads next to URLs you want to test - echo http://target.com|unfurl format %s://%d/ 3. Visit crafted URL...

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

cve-2017-12629

README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...

CVE-2021-26855-SSRF

CVE-2021-26855-SSRF-Poc This script helps to identify CVE-2021-26855 ssrf Poc Reference: https://proxylogon.com/ Script usage python CVE-2021-26855.py -H target.com -B xxxxxxxxxxxxxxxxxx.burpcollaborator.net If you are able to retrieve tokens through HTTPS request. then the target is vulnerable...

XXRF-Shots

¿Qué es la vulnerabilidad SSRF? Server Side Request Forgery SSRF es un tipo de vulnerabilidad que permite a los atacantes enviar solicitudes especialmente diseñadas a través de una aplicación web vulnerable. Con esta técnica, los atacantes pueden obtener acceso no autorizado a recursos internos...

CVE-2026-48205

camel-dns dns. / term Header Injection Reproducer CVE-2026-48205 This project demonstrates a message-header injection in Apache Camel's camel-dns component, tracked as CVE-2026-48205. The DNS producers read their operation parameters — the resolver to query, the name/domain to look up, the record...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – Database Connection String Injection via Env Variable Program Code Python root@kitploit: dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dbur...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...