C2-Tracker

C2 Tracker C2 Tracker es un feed de IOC gratuito, impulsado por la comunidad, que utiliza búsquedas en Shodan yCensys para recolectar direcciones IP de infraestructura conocida de malware/botnet/C2. Este Proyecto ha sido Archivado Este proyecto ha sido archivado. Los archivos de texto en data/ se...

awesome-shodan-queries

Impresionantes Consultas de Búsqueda de Shodan Con el tiempo, he recolectado una variedad de consultas de búsqueda interesantes, divertidas y deprimentes para usar en Shodan, el literal motor de búsqueda de internet. Algunas devuelven resultados que provocan vergüenza ajena, mientras que otras...

FireShodanMap

FireShodanMap FireShodanMap es un mapa en tiempo real que integra Firebase y Shodan. Se realiza una búsqueda utilizando Shodan para encontrar dispositivos vulnerables y se muestran en el mapa para su análisis. Todos los datos actualizados en Firebase son en tiempo real. Cambios Tenemos un archivo...

apache-exploit-CVE-2021-42013

apache-exploit-CVE-2021-42013 Exploit con búsqueda integrada de Shodan Por favor, úsalo solo con fines educativos!...

CVE-2018-9995-ModifiedByGwolfs

declaración Esta herramienta es una versión mejorada del CVE-2018-9995 escrita por gwolfs, y es solo para uso educativo. No la uses con fines ilegales, todas las consecuencias derivadas de esto son tuyas. La versión original fue escrita por ezelf y está en...

nextjs-CVE-2025-29927-hunter

Acerca de Una herramienta simple en Python que automatiza búsquedas en Shodan y filtra IPs/dominios objetivo para identificar activos potencialmente vulnerables a CVE-2025-29927 en despliegues de Next.js. Uso Extraer tanto IPs como dominios python3 nextjs-CVE-2025-29927-hunter.py -t target.com So...

sdwan-harvester

SD-WAN Harvester 🌐 Framework de censo de Internet SD-WAN Descargo de responsabilidad Este proyecto ya no se mantiene. Es estable y todavía puedes usarlo para escaneos SD-WAN, pero actualmente, una forma más recomendable y precisa de escanear diferentes cosas en Internet no solo soluciones SD-WAN ...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134, una vulnerabilidad de inyección OGNL que permitiría a un atacante no autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. Este script puede encontrar servidores vulnerables para CVE-2022-26134 mediante el motor de búsque...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

Exploit for CVE-2025-68613

n8n CVE-2025-68613 Internet Scanner A Tkinter-based GUI tool...

Exploit for Improper Validation of Specified Type of Input in Servicenow

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4...

Two Weeks of Monitoring ProxyNotShell (CVE-2022-41040 & CVE-2022-41082) Threat Activity

The Wordfence Threat Intelligence team has been monitoring exploit attempts targeting two zero-day vulnerabilities in Microsoft Exchange Server tracked as CVE-2022-41040 and CVE-2022-41082, collectively known as ProxyNotShell. These vulnerabilities are actively being exploited in the wild. At the...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...

Exploit for Path Traversal in Apache Http_Server

apache-exploit-CVE-20...

RDP abused for DDoS attacks

We have talked about RDP many times before. It has been a popular target for brute force attacks for a long time, but attackers have now found a new way to abuse it. Remote access has become more important during the pandemic, with as many people as possible try to work from home. Which makes it...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

PoC exploit for CVE-2020-3452, an unauthorized remote file reading vulnerability in Cisco Adaptive Security Appliance and FTD Software. The exploit uses Shodan to scan for vulnerable targets, then attempts to exploit the vulnerability by sending crafted HTTP requests to the identified targets. Th...

Exploit for CVE-2013-6026

PoC exploit for CVE-2013-6026, a severe vulnerability allowing unauthenticated access to the administration panel of many routers made by D-Link. The target product/service is D-Link routers, and the vulnerability class/vector is auth bypass. The probable entry point is the Shodan search engine,...

Pure Blood v2.0 - A Penetration Testing Framework Created For Hackers / Pentester / Bug Hunter

A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter. Web Pentest / Information Gathering: Banner Grab Whois Traceroute DNS Record Reverse DNS Lookup Zone Transfer Lookup Port Scan Admin Panel Scan Subdomain Scan CMS Identify Reverse IP Lookup Subnet Lookup Extract Page...

Hacker Puts Airport's Security System Access On Dark Web Sale For Just $10

If you can't find it on Google, you will definitely find it on the Dark Web. Black markets on the Dark web are not known for just buying drugs, it is a massive hidden network where you can buy pretty much anything you can imagine—from pornography, weapon, and counterfeit currencies, to hacking...

Attackers Use UPnP to Sidestep DDoS Defenses

Universal Plug and Play networking protocols have never been a friend of security researchers. On Monday, Imperva gave the InfoSec community another reason to dislike UPnP. In a proof-of-concept Distributed Denial of Service DDoS attack, Imperva researchers have devised a way to exploit the UPnP...