brutus

Brutus "Et tu, Brute?" —— 凭证沦陷前的最后遗言。 纯Go编写的现代凭证测试工具 安装 • 快速开始 • 流水线 • 协议 • 枚举 • 代理 • 库 概述 Brutus 是一个多协议认证测试工具，旨在解决攻击性安全工具中的一个关键缺口：跨多种网络服务的高效凭证验证。虽然专注于HTTP的工具比比皆是，但渗透测试人员和红队操作员经常会遇到数据库、SSH、SMB 以及其他需要专门认证测试能力的网络服务。 Brutus 使用 Go 构建为单个二进制文件，零外部依赖，能够与 Nerva 无缝集成以实现自动化服务发现，使操作员能够快速识别并测试整个网络范围内的身份验证向量。...

Project-Deep-Focus

Deep Focus 一种高性能网络侦察工具，用于跨IP范围发现和指纹识别服务。专为安全研究人员和网络管理员设计。 目录 1. 概述 2. 特性 3. 需求 4. 安装 5. 使用 6. 配置 7. 理解导出的日志 8. 目标选择指南 9. 故障排除 10. 许可 概述 Deep Focus 是一款为大规模服务发现设计的异步网络扫描器。它能智能探测常见网络服务，并为每个发现的服务提供详细的认证状态信息。你可以把它看作你的个人 mini Shodan 。 该工具针对被动散热系统（如 Apple M 系列笔记本）进行了优化，内置热管理功能，当系统负载过高时会自动降低扫描速率。 主要功能 扫描...

nerva

Nerva Nerva：快速服务指纹识别 CLI 功能特性 • 安装 • 快速开始 • 使用方法 • 协议 • 库 • 使用场景 • 故障排除 使用 Go 编写的高性能服务指纹识别工具。 可识别 TCP、UDP 和 SCTP 传输层上的 170 多种网络协议，并提取丰富的元数据。 Nerva 能够快速检测并识别开放网络端口上运行的服务。可将其与 Naabu 等端口扫描器配合使用，对发现的服务进行指纹识别，或将其集成到你的安全流水线中实现自动化侦察。 功能特性 170+ 协议插件 — 涵盖数据库、远程访问、Web 服务、消息传递、工业及电信协议 76 个 HTTP 指纹识别器 — 检测 W...

UBUNTU-CVE-2026-100696

Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver plugins/drivers/elastic.php, fixed in 6.0.2. Because adminer/include/auth.inc.php invokes Driver::connect before the login result is validated, an...

fingerprintx

機能 • インストール • 使い方 • fingerprintxの実行 • ライブラリとしての使用 • なぜnmapではないのか? • 注意事項 • 謝辞...

nerva v1.69.6

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

EUVD-2026-36288

Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server to issue arbitrary HTTP requests to internal services via the uploadFromUrl endpoint. This allows internal port...

PT-2026-48709

Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server to issue arbitrary HTTP requests to internal services via the uploadFromUrl endpoint. This allows internal port...

CVE-2026-47170: Server-Side Request Forgery (SSRF)

Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server to issue arbitrary HTTP requests to internal services via the uploadFromUrl endpoint. This allows internal port...

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY , a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO small office and home office and IoT devices and operates as a centrally controlled, high-performanc...

recon2exploit

recon2exploit recon2exploit is a single-file security ass...

CVE-2026-40566

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery SSRF vulnerability in the IMAP/SMTP connection test functionality of FreeScout's MailboxesController. Three AJAX actions fetchtest line 731, sendtest line 682, and imapfolder...

CVE-2026-40566

FreeScout (versions before 1.8.213) contains an SSRF in the IMAP/SMTP connection test flow via MailboxesController. The three AJAX actions fetch_test, send_test, and imap_folders pass admin-configured in_server/in_port and out_server/out_port directly to fsockopen and to IMAP/SMTP clients without...

EUVD-2026-24167

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery SSRF vulnerability in the IMAP/SMTP connection test functionality of FreeScout's MailboxesController. Three AJAX actions fetchtest line 731, sendtest line 682, and imapfolder...

FreeScout 安全漏洞

FreeScout is a lightweight and powerful free open-source help desk and shared inbox built using PHP Laravel framework by FreeScout Inc. Versions of FreeScout prior to 1.8.213 contained security vulnerabilities. These vulnerabilities stemmed from the IMAP/SMTP connection testing functionality in t...

PT-2026-34010

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery SSRF vulnerability in the IMAP/SMTP connection test functionality of FreeScout's MailboxesController. Three AJAX actions fetch test line 731, send test line 682, and imap...

CVE-2026-40566: Server-Side Request Forgery (SSRF)

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a Server-Side Request Forgery SSRF vulnerability in the IMAP/SMTP connection test functionality of FreeScout's MailboxesController. Three AJAX actions fetchtest line 731, sendtest line 682, and imapfolder...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the supi parameter. An attacker can cause internal URL parsing errors and expose system-level error details by injecting control characters, such as %00, into requests. This can be used for service fingerprintin...

CVE-2026-27642

free5gc UDM provides Unified Data Management UDM for free5GC, an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.1, remote attackers can inject control characters e.g., %00 into the supi parameter, triggering internal URL parsing errors net/url:...

CVE-2025-69253 free5GC vulnerable to improper error handling in NEF with information exposure

free5GC is an open-source project for 5th generation 5G mobile core networks. Versions up to and including 1.4.1 of the User Data Repository are affected by Improper Error Handling with Information Exposure. The NEF component reliably leaks internal parsing error details e.g., invalid character '...