awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

Project-Deep-Focus

Deep Focus A high-performance network reconnaissance tool for discovering and fingerprinting services across IP ranges. Built for security researchers and network administrators. Table of Contents 1. Overview 2. Features 3. Requirements 4. Installation 5. Usage 6. Configuration 7. Understanding...

ps.sh

ps.sh ps.sh is a bash script that automates port scanning on specified target hosts. The aim of the scripts is reducing scan time, increasing scan efficiency and automating the workflow. Resource Features Installation Usage Contributing Licensing Credits Contributors Dependencies Features Automat...

Apache-Dubbo-CVE-2023-23638-exp

For a more comprehensive Dubbo vulnerability scanning tool, see my other project: https://github.com/YYHYlh/Dubbo-Scan Apache-Dubbo-CVE-2023-23638-exp An engineering practice for exploiting Apache Dubbo CVE-2023-23638, covering the entire process from service discovery to exploitation and echo in...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

udpx

高速かつ軽量、UDPXはGoで書かれたシングルパケットUDPスキャナで、45以上のサービスの発見をサポートし、カスタムサービスの追加も可能です。使いやすくポータブルで、Linux、Mac OS、Windowsで実行できます。zgrab2やzmapのようなインターネット全体をスキャンするツールとは異なり、UDPXは移植性と使いやすさを重視して設計されています。 高速です。単一サービスの場合、/16ネットワーク全体を約20秒でスキャンできます。 libpcapやその他の依存関係をインストールする必要はありません。 Linux、Mac...

udp-hunter

What is UDP Hunter? UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing...

CVE-2021-29441

CVE-2021-29441 - Bypass de Autenticación en Nacos CVE-2021-29441 es una vulnerabilidad crítica de bypass de autenticación que afecta a Nacos versiones anteriores a la 1.4.1. Nacos es una plataforma popular para el descubrimiento dinámico de servicios, gestión de configuración y administración de...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

cpanelscanner

CpanelScanner CpanelScanner 是一款 Go 命令行工具，它从 stdin 读取主机，探测配置端口（默认 2087）上的 HTTPS 服务，并检查响应中是否包含配置的标记字符串（例如 WHM Login）。 其预期用途是识别暴露在互联网上的 cPanel/WHM 实例，以便在授权环境中针对 CVE-2026-41940（cPanel 与 WHM 身份验证绕过）进行测试。 如果找到匹配项，解析后的 URL 将追加到 whm.txt 中。 功能特性 使用可配置的工作线程数量进行并发扫描 通过 config.toml 实现配置驱动的探测行为 简单的 stdin...

MicroBurst

MicroBurst: Un Toolkit de PowerShell para Atacar Azure MicroBurst incluye funciones y scripts que facilitan el descubrimiento de servicios de Azure, la auditoría de configuraciones débiles y acciones posteriores a la explotación, como el volcado de credenciales. Está pensado para usarse durante...

CVE-2026-55068

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

Astra Linux – Vulnerability in bluez

In BlueZ before version 5.55, a double-free error was detected in the gatttool disconnectcb routine from the shared/att.c file. A remote attacker could potentially cause a denial of service or code execution during service discovery, due to the redundant disconnect MGMT event...

MAL-2026-12172 Malicious code in bigops-voximplant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20e151930946a17e9bea02eb51c760264c27138792955452acc4231196ceaae On require of bigops-voximplant, index.js loads ext.js which downloads an OS/arch-specific binary from Cloudflare Workers subdomains whose hostnames...

CVE-2026-25289

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

CVE-2026-25289 Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

Linux Distros Unpatched Vulnerability : CVE-2026-47184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache,...

CVE-2026-48045

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

DEBIAN-CVE-2026-47184

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...