MicroBurst

MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use...

Project-Deep-Focus

Deep Focus A high-performance network reconnaissance tool for discovering and fingerprinting services across IP ranges. Built for security researchers and network administrators. Table of Contents 1. Overview 2. Features 3. Requirements 4. Installation 5. Usage 6. Configuration 7. Understanding...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

ps.sh

ps.sh ps.sh is a bash script that automates port scanning on specified target hosts. The aim of the scripts is reducing scan time, increasing scan efficiency and automating the workflow. Resource Features Installation Usage Contributing Licensing Credits Contributors Dependencies Features Automat...

Apache-Dubbo-CVE-2023-23638-exp

For a more comprehensive Dubbo vulnerability scanning tool, see my other project: https://github.com/YYHYlh/Dubbo-Scan Apache-Dubbo-CVE-2023-23638-exp An engineering practice for exploiting Apache Dubbo CVE-2023-23638, covering the entire process from service discovery to exploitation and echo in...

udpx

快速且轻量，UDPX 是一个用 Go 编写的单包 UDP 扫描器，支持发现超过 45 种服务，并且能够添加自定义服务。它易于使用且便携，可在 Linux、Mac OS 和 Windows 上运行。与 zgrab2 和 zmap 等互联网范围扫描器不同，UDPX 专为便携性和易用性而设计。 速度快。扫描单个服务时，可在约 20 秒内扫描整个 /16 网络。 无需安装 libpcap 或任何其他依赖项。 可在 Linux、Mac OS、Windows 上运行。如果你为 Arm 构建了它，也可以在 Nethunter 上运行。 可定制。你可以添加自己的探测包，测试更多协议。 结果以 JSONL...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

udp-hunter

什么是UDP Hunter？ UDP 扫描一直是一项缓慢且痛苦的工作，如果再加上 IPv6 的 UDP 扫描，可用的工具选择就非常有限了。UDP Hunter 是一个基于 Python 的开源网络评估工具，专注于 UDP 服务扫描。通过 UDP Hunter，我们专注于为 IPv6 和 IPv4 主机提供广泛已知的 UDP 协议审计。截至目前，UDP Hunter 支持 19 种不同的服务探针。该工具允许您对大型网络进行批量扫描，也可以针对特定端口等进行目标主机扫描。一旦发现开放的服务，UDP Hunter 还会更进一步，为您提供如何可能利用已发现服务的指导。UDP Hunter...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

cpanelscanner

CpanelScanner CpanelScanner es una herramienta CLI en Go que lee hosts desde stdin, sondea HTTPS en un puerto configurado por defecto 2087 y comprueba si la respuesta contiene una cadena de marcado configurada por ejemplo WHM Login. Su uso previsto es identificar instancias de cPanel/WHM expuesta...

CVE-2021-29441

CVE-2021-29441 - Nacos Authentication Bypass CVE-2021-29441 is a critical authentication bypass vulnerability affecting Nacos versions prior to 1.4.1. Nacos is a popular platform for dynamic service discovery, configuration management, and service administration used within cloud-native...

CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

Astra Linux – Vulnerability in bluez

In BlueZ before version 5.55, a double-free error was detected in the gatttool disconnectcb routine from the shared/att.c file. A remote attacker could potentially cause a denial of service or code execution during service discovery, due to the redundant disconnect MGMT event...

MAL-2026-12172 Malicious code in bigops-voximplant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20e151930946a17e9bea02eb51c760264c27138792955452acc4231196ceaae On require of bigops-voximplant, index.js loads ext.js which downloads an OS/arch-specific binary from Cloudflare Workers subdomains whose hostnames...

CVE-2026-25289

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

CVE-2026-25289 Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

Linux Distros Unpatched Vulnerability : CVE-2026-47184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache,...

CVE-2026-48045

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

DEBIAN-CVE-2026-47184

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...