netscout

NetScout NetScout ist ein OSINT-Tool, das Domains, Subdomains, Verzeichnisse, Endpunkte und Dateien für eine angegebene Seed-URL findet. Es besteht aus den folgenden Komponenten: BinaryEdge-Client: Ruft Subdomains ab DNS: Versucht, einen DNS-Zonentransfer durchzuführen, um Subdomains zu extrahier...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Gemäß den Bedingungen des Vertrags...

Belati

Belati Belati - Il tradizionale coltellino svizzero per OSINT Belati è uno strumento per la raccolta di dati pubblici e documenti pubblici da siti web e altri servizi a scopo OSINT. Questo strumento è ispirato da Foca e Datasploit per OSINT : Versione corrente v0.2.4 Belati in azione Perché l'ho...

Dumb

Dumb - Dumain Bruteforcer Uno strumento per fare bruteforce sui dumain! Come funziona DUMB: Dumb funziona con un dumain mascherato per sostituzione. Il dumain può avere tante mascherine quante ne vuoi, purché passi le wordlist corrispondenti. Per esempio: Bruteforcing di subdumain: Usando la...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

kenzer

KENZER - Automatisierte Aufzählung und Scanning von Web-Assets VERALTET Erwähnungen Eine konzeptionelle Einführung in die Automatisierung von Bug Bounties Demo Screenshots Anleitung zur Ausführung 0. Führe git clone https://github.com/ARPSyndicate/kenzer /home/ubuntu/kenzer && cd...

sub404

Sub404: Uno strumento veloce per verificare la vulnerabilità di takeover di sottodomini Cos'è Sub 404 Sub 404 è uno strumento scritto in Python utilizzato per verificare la possibilità di vulnerabilità di takeover di sottodomini ed è veloce perché asincrono. Perché Durante il processo di...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

3klCon

Progetto 3klCon Archiviato Descrizione Strumento di ricognizione automatizzato che funziona con scopo Grandi e Medi. È consigliato usarlo su VPS, scoprirà segreti e cercherà vulnerabilità Quindi, benvenuto, e addentriamoci subfinder is in...

probable_subdomains

Probabili sottodomini Strumento online: https://weakpass.com/generate/domains TL;DR Durante le bug bounty, i test di penetrazione, le esercitazioni di red team e altre grandi attività, c'è sempre spazio quando devi lanciare amass, subfinder, sublister o qualsiasi altro strumento per trovare...

EUVD-2026-63500

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

CVE-2026-18165

@fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin validates the OAuth state, and with PKCE the code verifier, by comparing the callback query parameter against an unprefixed, predictable cookie, with no server-side binding to the...

CVE-2026-18165 @fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies

@fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin validates the OAuth state, and with PKCE the code verifier, by comparing the callback query parameter against an unprefixed, predictable cookie, with no server-side binding to the...

CVE-2026-18165

Summary: CVE-2026-18165 affects @fastify/oauth2 in versions 7.2.0 up to, but not including, 8.3.0. The vulnerability arises from validating the OAuth state and PKCE code verifier by comparing the callback query parameter to an unprefixed, predictable cookie, with no server-side binding to the ini...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...