git-scan

git-scan This tool is designed to scan and identify whether a website has an exposed ".git" directory, which may contain sensitive information such as source code or Git configuration files. Features Massively scans URLs to find out if the ".git/HEAD" directory is available on the website. Uses...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

CVE-2025-69599

CVE-2025-69599 作者: Rafael José Núñez Gulías 公司: Iberian Var Group 受影响产品: RayVentory Scan Engine 12.6 Update 8 及更早版本 Raynet 安全公告: RSEC200965 Raynet 中的 rvia 存在一个 不受控制的搜索路径元素 问题。在加载共享对象和调用系统二进制文件（例如 .so 和辅助二进制文件）时，它们都使用相对路径进行调用，这使得用户可以通过 PATH 环境变量操作来篡改最终执行的二进制文件或 .so 对象。 在以下证据中，在 /tmp 目录下创建了一个名为 cur...

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

Hybrid Submit

Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...

EUVD-2026-75269

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

Log-4j-scanner

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

reconkg

reconkg A vulnerability triage tool. It takes what a scan already found, works out which CVEs plausibly apply, tells you how confident it is and why, and gives you the commands to check for yourself. It does not scan anything, and it does not exploit anything. Install on Kali root@kitploit: git...

joern

Joern 查询数据库（"Joern-Scan"） 这是开源代码分析平台 Joern 的核心查询数据库。它有两个用途： 它提供了将 Joern 转变为即用型代码扫描工具所需的“电池”。 它的查询可作为那些希望编写自己查询的人的示例。 基于 JDK11 构建，但运行在 JRE = 1.8 上 查询数据库作为一个独立的库分发，其中包括 Joern 作为依赖项。这意味着无需安装 Joern 即可使用数据库中的查询。 同时，数据库是一个 Joern 扩展，即在启动时动态加载后，其功能可在交互式 Joern shell 和 Joern 脚本中使用。 你可以 fork...

arp-scan

arp-scan Acerca de arp-scan es una herramienta de escaneo de red que utiliza el protocolo ARP para descubrir y realizar el fingerprinting de hosts IPv4 en la red local. Está disponible para Linux, BSD, macOS y Solaris bajo la licencia GPLv3. Este es README.md para la versión 1.10.1-git de arp-sca...

nmap-farewell

nmap-farewell Esta herramienta tiene como objetivo demostrar las capacidades de la función nfnetlinkqueue del kernel de Linux. Para obtener información más detallada, puedes leer este artículo. Antes de que los paquetes sean descartados por el kernel, se envían a esta herramienta para su posterio...

nmap-vulnerability-scan-scripts

Aviso de vulnerabilidad de Synopsys CyRC: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2026-85132 WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule the administrator configured...

WordPress WPLP Cookie Consent plugin 4.0.2-4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure vulnerability

Subscriber+ Cookie Scan Schedule Disclosure vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.0.2-4.4.1...

CVE-2019-19781

CVE-2019-19781 Módulo de CVE-2019-19781 para Router Scan Project Cómo Usar Preparación root@kitploit: pip3 install ipcalc,requests Uso root@kitploit: python3 scanner.py Derechos de autor Parte de este repositorio que envía la respuesta tcp está parcialmente bifurcada de trustedsec/cve-2019-19781...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 模块，用于 Router Scan Project 使用方法 准备 root@kitploit: pip3 install time,threading,ipcalc,requests 使用 root@kitploit: python3 exp.py -f list.txt 版权 本仓库中发送 TCP 响应的部分代码部分派生自 milo2012/CVE-2018-13379，并针对 Router Scan Project 的 API 进行了修改。...

MSTeams---Vulnerability---Remediation

🛡️ CVE-2025-53783 修复：Microsoft Teams 远程代码执行漏洞 📝 项目概述 本项目演示了一个漏洞管理工作流程 。通过使用 Azure 虚拟机，我识别出 Microsoft Teams 中存在一个高危的“远程代码执行”（RCE）漏洞，通过 PowerShell 验证了其存在，并使用 Windows 包管理器部署了程序化修复。 问题描述 Microsoft Teams 桌面版（版本低于 25122.1415.3698.6812）存在一个基于堆的缓冲区溢出漏洞。这使得未经授权的攻击者能够通过网络执行恶意代码——本质上为系统打开了“后门”。 🚨 发现过程 我首先在...

log4v-vuln-check

Log4JS Escáner de Archivos y Vulnerabilidades + Escáner de Enlace de Puertos Locales Este script se utiliza para realizar una verificación rápida para ver si su servidor posiblemente está afectado por CVE-2021-44228 la vulnerabilidad log4j. No proporciona una garantía del 100 % de que no sea...