Lucene search
+L

9836 matches found

Kitploit
Kitploit
added 2026/09/13 12:20 p.m.18 views

http-request-smuggler

HTTP Request Smuggler Esta extensión de Burp Suite detecta y explota automáticamente vulnerabilidades de contrabando de solicitudes HTTP HTTP Request Smuggling utilizando técnicas avanzadas de desincronización desarrolladas por el investigador de PortSwigger James Kettle. Es compatible con escane...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:16 a.m.6 views

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values tinyhttp Assigned CVE ID: CVE-2026-66752 Summary tinyhttp checks only whether a Transfer-Encoding header is present. It never looks at the value. Any value, including codings that are not chunked and coding lists whos...

6.3CVSS5.9AI score0.00237EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 8:52 a.m.9 views

CVE-2024-40725-CVE-2024-40898

🚨Alerta🚨Vulnerabilidad de Apache 🚨Alerta🚨Aviso de Seguridad: CVE-2024-40725 y CVE-2024-40898🚨Alerta🚨 CVE-2024-40725 Descripción: CVE-2024-40725 es una vulnerabilidad de alta severidad encontrada en Apache HTTP Server versiones 2.4.0 a 2.4.61. Esta vulnerabilidad afecta al módulo modproxy. Cuando ...

9.1CVSS6.6AI score0.04168EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 8:39 a.m.11 views

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler Una herramienta de prueba de HTTP Request Smuggling / Desync escrita en Python 3 Agradecimientos Un agradecimiento especial a James Kettle por su investigación y métodos sobre...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:03 a.m.5 views

CVE-2025-55315-PoC-Exploit

CVE-2025-55315 Pentest Tool HTTP Request Smuggling Exploitation Tool for ASP.NET Core Kestrel ⚠️ LEGAL WARNING THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY! Use ONLY on systems you own or have explicit written authorization to test Unauthorized access to computer systems is ILLEGAL Tool...

9.9CVSS7.9AI score0.65838EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 8:01 a.m.5 views

CVE-2024-27304-PoC

CVE-2024-27304-PoC referencias DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp Una aplicación web simple con funcionalidad de inicio de sesión. Solo los administradores pueden iniciar sesión...

9.8CVSS8AI score0.01109EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 7:30 a.m.11 views

TChopper

TChopper Nueva técnica que he descubierto recientemente y le he dado un apodo Chop chop para realizar movimiento lateral utilizando el nombre para mostrar de servicios de Windows y WMI, contrabandeando el binario malicioso como fragmentos base64 y automatizando el proceso con la herramienta...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:23 a.m.4 views

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling Solo con fines educativos Configuración root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Prueba Confirma que...

7.5CVSS7.8AI score0.57934EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 5:37 a.m.8 views

CLZero

CLZero Un proyecto para fuzzing de vectores de ataque de contrabando de solicitudes HTTP/1.1 CL.0. Acerca de Gracias a @albinowax, @defparam y @d3d, de lo contrario esta herramienta no existiría. Inspirado por la herramienta Smuggler, todos los gadgets de ataque adaptados de Smuggler y...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:19 a.m.5 views

CVE-2025-23167

CVE-2025-23167 – Exploit de contrabando de solicitudes HTTP en Node.js Exploit funcional para CVE-2025-23167, una vulnerabilidad de contrabando de solicitudes que afecta a las versiones de Node.js 20.x anteriores a v20.19.2. Este error permite una terminación incorrecta de cabeceras HTTP, lo que...

6.5CVSS7AI score0.00505EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:13 a.m.62 views

http2smugl

http2smugl This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 - HTTP/1.1 conversion by the frontend server. The scheme is as follows: 1. An attacker sends a crafted HTTP/2 request to the target server, which we call frontend. 2. The request is...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:13 a.m.8 views

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:13 a.m.5 views

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - POC de script Expect envía un correo electrónico legítimo, pero dentro del correo hay muchos otros correos diferentes remitentes, destinatarios, asunto, etc.. El correo inicial se verifica con SPF/DKIM/DMARC, ¡los demás que están dentro no! uso:...

5.3CVSS6.1AI score0.02635EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 5:09 a.m.4 views

CVE-2023-25690_lab

HTTP Request Smuggling via Apache proxy Environment Setup Infrastructure...

9.8CVSS7.2AI score0.84508EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 5:05 a.m.7 views

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:45 a.m.6 views

smugglex

Rust-powered HTTP Request Smuggling Scanner. Overview Smugglex is a security testing tool that detects HTTP Request Smuggling vulnerabilities in web applications. It tests for CL.TE, TE.CL, TE.TE, H2C, and H2 smuggling attacks, and — on HTTPS targets — speaks real HTTP/2 ALPN h2 to detect...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:37 a.m.7 views

h2csmuggler

h2cSmuggler Descripción h2cSmuggler introduce tráfico HTTP en configuraciones inseguras de proxypass de servidores periféricos estableciendo comunicaciones HTTP/2 en texto claro h2c con servidores back-end compatibles con h2c, lo que permite eludir reglas de proxy y controles de acceso. Consulte ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:16 a.m.7 views

Http11Probe

Http11Probe Http11Probe es un comprobador de cumplimiento y seguridad para servidores HTTP/1.1. Envía peticiones malformadas, ambiguas y de gran tamaño a un servidor a través de sockets TCP sin procesar y verifica cómo responde en comparación con lo que realmente exigen los RFC 9110 y RFC 9112...

6AI score
SaveExploits0
EUVD
EUVD
added 2026/09/13 3:37 a.m.8 views

EUVD-2026-76943

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

7.5CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/13 3:37 a.m.17 views

CVE-2026-90678

HAProxy 3.3.0 through 3.4.4 and 3.5-dev1 through 3.5-dev5 are affected by an HTTP request smuggling vulnerability in the HTTP/3 (QUIC) multiplexer . When an HTTP/3 request with no Content-Length header is forwarded to an HTTP/1.1 backend using chunked transfer coding on a reused connection, the d...

7.5CVSS
SaveExploits0References3
Rows per page
Query Builder