621 matches found
uncover
Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...
InfraHunter
InfraHunter Caccia attivamente alle infrastrutture degli attaccanti filtrando i risultati di Shodan con i dati di URLScan. Requisiti Chiave API di Shodan Chiave API di URLScan python3 -m pip install -r requirements.txt Esempi di utilizzo python3 .\hunter.py -q "http.html:'titan stealer'" -s Shoda...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
Exploit for CVE-2026-42945
CVE-2026-42945-NGINX-Rift bash Basic usage with target I...
sshprank 1.7.0
sshprank is a fast SSH mass-scanner, login cracker, and banner grabber tool using the python-masscan and shodan modules...
Lyussfyuring002
lyussfyuring002 web exploitation + OSINT toolkit for people...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-Scanner !Licensehttps://img.shields...
Luban-2040
Luban 2040 v1 Advanced CVE & Exploit Finder Author: m...
pentestfr
Pentest Framework — Kali Linux / VirtualBox Framework Python...
A Scan-Based Analysis of Internet-Exposed IoT Devices Using Shodan Data
An open measurement problem in IoT security is whether scan-observable network configurations encode population-level exposure risk beyond individual devices. An analysis of internet-exposed IoT endpoints using a controlled multi-country sample from Shodan Search and Shodan InternetDB, selecting...
Exploit for Out-of-bounds Write in Mikrotik Routeros
Mikrotik Exploit Scan and Export RouterOS Password A security...
Exploit for Insufficient Type Distinction in Rarlab Winrar
CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...
Exploit for CVE-2025-68613
n8n CVE-2025-68613 Internet Scanner A Tkinter-based GUI tool...
Exploit for Deserialization of Untrusted Data in Facebook React
RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extensio...
CVE-2025-13315, CVE-2025-13316: Critical Twonky Server Authentication Bypass (NOT FIXED)
Overview Twonky Server version 8.5.2 is susceptible to two vulnerabilities that facilitate administrator authentication bypass on Linux and Windows. An unauthenticated attacker can improperly access a privileged web API endpoint to leak application logs, which contain encrypted administrator...
AutoSploit
PoC exploit for CVE-XXXX-XXXX. It is an automated mass exploiter that uses the Shodan.io API to collect targets and then attempts to exploit them using Metasploit modules. The tool can be configured to run all available Metasploit modules against the targets in a 'Hail Mary' type of attack. The...
Enterprise Security Incident Analysis and Countermeasures Based on the T-Mobile Data Breach
This paper presents a comprehensive analysis of T-Mobile's critical data breaches in 2021 and 2023, alongside a full-spectrum security audit targeting its systems, infrastructure, and publicly exposed endpoints. By combining case-based vulnerability assessments with active ethical hacking...
CVE-2019-19752
nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...
MAL-2025-191845 Malicious code in python3-shodan (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b4fca245262ff8de532efc88e1941697e6994786e09eca8a9cbcdbf9faff5cca Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...