veilgate

VeilGate VeilGate es un proxy de engaño de código abierto para equipos que quieren aumentar el coste del escaneo de seguridad automatizado sin poner reglas de bloqueo frágiles delante de los usuarios reales. Se sitúa delante de una aplicación web, puntúa cada solicitud y elige uno de tres...

NginxHunter

NginxHunter 描述 NginxHunter 是一款综合性工具，用于分析 Nginx 访问日志中的安全漏洞和可疑活动。它可以检测 SQL 注入尝试、扫描工具、敏感路径访问、利用尝试、WebShell 等。非常适合希望增强 Nginx 服务器安全的系统管理员和安全专业人员。 使用方法 使用 root 权限 $ wget https://raw.githubusercontent.com/emrekybs/NginxHunter/main/nginxsecurityhunter.sh -O nginxsecurityhunter.sh && chmod +x...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer 使用 Python Web 日志分析器自动化分析 Web 服务器日志的过程。这款强大工具旨在通过识别和检测服务器日志中的各种网络攻击来增强安全性。通过以下功能领先于潜在威胁： 目录 功能 未来功能 安装 使用 贡献 许可证 功能 1. 攻击检测：识别并标记潜在的跨站脚本（XSS）、本地文件包含（LFI）、远程文件包含（RFI）及其他常见的 Web 应用攻击。 2. 速率限制监控：检测短时间内多次请求的可疑模式，帮助识别暴力破解攻击或自动化扫描工具。 3. 自动扫描器检测：通过识别与已知自动化扫描工具或漏洞扫描器相关的请求，保障 Web 应用安全...

CVE-2026-41940

CVE-2026-41940 ✅ 脚本分析（扫描器的作用及工作原理） ✅ 根本原因技术解析（CRLF/Session.pm 差异） ✅ 防护措施——补丁命令、安全编码经验 ✅ 缓解方案——防火墙规则、WAF 配置、加固建议 ✅ IOC 追踪——检测是否已被攻击 ✅ VaPT 方法论——范围界定、侦察、报告框架、MITRE 映射 ✅ 风险评分、移动端导航、复制按钮、可折叠区块...

react2shell-honeypot

React2Shell 蜜罐 我为React2Shell漏洞尝试制作一个蜜罐 所有攻击载荷都会写入 logs/ip 文件夹 使用方法 go build 可选：export GINMODE=release react2shell-honeypot -addr localhost:8080 已在以下扫描器上测试： assetnote/react2shell-scanner gensecaihq/react2shell-scanner hackersatyamrastogi/react2shell-ultimate...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer wi...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Dell Enterprise SONiC OS Detection

Binary data dellsonicosinstalled.nbin...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

Linux Distros Unpatched Vulnerability : CVE-2025-38061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pktgen: fix access outside of user given buffer in pktgenthreadwrite Honour the user given buffer size for the strnlen calls otherwise strnlen will access...

Microsoft Exchange Admin Center Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Exchange Admin Center instance on the target application. No source data...

Voiceflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Voiceflow chatbot on the target application. Voiceflow is a solution to build & deploy AI customer experiences. This detection is included in the AI and LLM category. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2011-4077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

SonarQube Public Projects Detected

A SonarQube Public Projects response have been detected on the target web application. These response may contain sensitive information which could assist an attack to conduct further attacks. No source data...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...