ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

Project-Deep-Focus

Deep Focus A high-performance network reconnaissance tool for discovering and fingerprinting services across IP ranges. Built for security researchers and network administrators. Table of Contents 1. Overview 2. Features 3. Requirements 4. Installation 5. Usage 6. Configuration 7. Understanding...

udp-hunter

What is UDP Hunter? UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing...

ps.sh

ps.sh ps.sh is a bash script that automates port scanning on specified target hosts. The aim of the scripts is reducing scan time, increasing scan efficiency and automating the workflow. Resource Features Installation Usage Contributing Licensing Credits Contributors Dependencies Features Automat...

MicroBurst

MicroBurst: A PowerShell Toolkit for Attacking Azure MicroBurst includes functions and scripts that support Azure Services discovery, weak configuration auditing, and post exploitation actions such as credential dumping. It is intended to be used during penetration tests where Azure is in use...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

SUSE CVE-2022-29224

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...

udpx

Rápido y ligero, UDPX es un escáner UDP de un solo paquete escrito en Go que admite el descubrimiento de más de 45 servicios con la capacidad de agregar servicios personalizados. Es fácil de usar y portátil, y puede ejecutarse en Linux, Mac OS y Windows. A diferencia de los escáneres de Internet...

Apache-Dubbo-CVE-2023-23638-exp

For a more comprehensive Dubbo vulnerability scanning tool, see my other project: https://github.com/YYHYlh/Dubbo-Scan Apache-Dubbo-CVE-2023-23638-exp An engineering practice for exploiting Apache Dubbo CVE-2023-23638, covering the entire process from service discovery to exploitation and echo in...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

cpanelscanner

CpanelScanner CpanelScanner es una herramienta CLI en Go que lee hosts desde stdin, sondea HTTPS en un puerto configurado por defecto 2087 y comprueba si la respuesta contiene una cadena de marcado configurada por ejemplo WHM Login. Su uso previsto es identificar instancias de cPanel/WHM expuesta...

CVE-2021-29441

CVE-2021-29441 - Nacos Authentication Bypass CVE-2021-29441 is a critical authentication bypass vulnerability affecting Nacos versions prior to 1.4.1. Nacos is a popular platform for dynamic service discovery, configuration management, and service administration used within cloud-native...

CVE-2026-77294 TREK: Server-Side Request Forgery via User-Configurable LLM Base URL

TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llmbaseurl through the settings API when the LLMPARSING feature is enabled. Write permission to the target trip instance is required to trigger the vulnerable AI-assisted impo...

GHSA-67C9-F6V2-QV86 Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)

Summary Steeltoe's Consul discovery client parses the secure metadata field on each registered service instance using bool.Parse, which throws on any value other than true or false. A single service instance registered with a malformed secure value for example yes or 1 aborts construction of the...

CVE-2026-81516

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDiscoveryClient constructs ConsulServiceInstance objects by parsing each registration's secure metadata with a strict Boolean conversion. A...

Astra Linux – Vulnerability in bluez

In BlueZ before version 5.55, a double-free error was detected in the gatttool disconnectcb routine from the shared/att.c file. A remote attacker could potentially cause a denial of service or code execution during service discovery, due to the redundant disconnect MGMT event...

CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

PT-2026-93227

Pwn2Own Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability...

MAL-2026-12172 Malicious code in bigops-voximplant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20e151930946a17e9bea02eb51c760264c27138792955452acc4231196ceaae On require of bigops-voximplant, index.js loads ext.js which downloads an OS/arch-specific binary from Cloudflare Workers subdomains whose hostnames...