ExtendedMacro

ExtendedMacro ExtendedMacro es un complemento para el proxy de BurpSuite. Proporciona una funcionalidad similar pero extendida de la función de Macro de BurpSuite. La funcionalidad principal es que puedes activar una o más solicitudes antes de cada solicitud activada desde Intruder, Repeater,...

CVE-2025-50433

CVE-2025-50433 — Vulnerabilidad crítica de apropiación de cuentas que afecta a las plataformas Monnit Cloud .imonnit.com Resumen Existe una vulnerabilidad crítica de autenticación en .imonnit.com que permite la apropiación total de cuentas ATO en cualquier cuenta de usuario sin interacción de la...

CSRFBrute

CSRFBrute CSRF login brute-force tool - V 0.5.0 Dev It is recommended to prioritize the stable and streamlined version csrfbrute.py 🚀 Features Dynamic CSRF Token refresh - Ensures accuracy on high-security targets Thread-safe session management - Supports high-concurrency operations, up to 100...

CVE-2023-38646

CVE-2023-38646 Lo script originale proviene da securezeron Durante i miei test, ho scoperto che la reverse shell generata da questo PoC, dopo la codifica base64, falliva a causa del carattere '=' alla fine. L'ho leggermente modificato per risolvere questo problema. 原始的生成reverse shell负载的代码...

CVE-2024-36539

Prueba de Concepto PoC para Vulnerabilidad de Permisos Inseguros en Contour v1.28.3 Este repositorio contiene un script de Prueba de Concepto PoC que demuestra una vulnerabilidad de permisos inseguros en Contour v1.28.3. Esta vulnerabilidad permite a atacantes acceder a datos sensibles y escalar...

CVE-2020-7378

CVE-2020-7378 – OpenCRX Predictable Password Reset Token and XXE Exploit This repository contains a combined proof-of-concept PoC exploit for CVE-2020-7378 , a critical vulnerability in OpenCRX versions up to and including 5.0-20200717. The exploit chains two core issues in the application: 1. A...

CVE-2019-19609-POC-Python

The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...

askWAM

askWAM askWAM requests Microsoft Entra access tokens silently through Windows Web Account Manager WAM. It ships as a .NET Framework client, a standalone native x64 client, and an x64 Beacon Object File with a CNA command adapter. All frontends can enumerate accounts visible to the client and targ...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2023-31851

CVE-2023-31851 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión web de Cudy LT400. La página /cgi-bin/luci/admin/network/wireless/status tiene XSS reflejado a través del parámetro iface. Los métodos de explotación implicarían enviar una solicitud especialmente...

SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 Vulnerability Checker Este script comprueba si un servidor MCP Inspector es vulnerable a CVE-2025-49596, un problema de seguridad donde el endpoint /sse responde a solicitudes no autenticadas falta de token de autenticación. Cómo Funciona El script envía una solicitud...

CVE-2024-50335

CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation Summary The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting XSS, allowing an attacker to inject malicious JavaScript code. This can be...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 es vulnerable a un ataque que permite exfiltrar credenciales a través de URLs remotas maliciosas. Un atacante puede convencer a un usuario de clonar un repositorio manipulado para obtener nombre de usuario y token OAuth...

CVE-2026-108548 AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token

AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-...

CVE-2026-108548

AstronRPA versions through 1.1.6 are vulnerable to an authentication bypass due to a flaw in the OpenResty gateway's auth_handler.lua component. The system fails to validate Bearer tokens , allowing unauthenticated attackers to provide arbitrary values to access the /api/resource/ and /api/rpa-ai...

CVE-2026-108548 AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token

AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-...

cs50-cyber-paloalto-oauth

Proyecto Final de Ciberseguridad CS50 Título: La Brecha OAuth de Salesloft y CVE-2024-3400 impacto en Palo Alto Autor: Yafiya Darwesh GitHub: Yafiah-Darwesh Video de YouTube: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Archivos presentation.pdf — diapositivas script.txt —...

CVE-2026-108114

Strapi versions 5.47.0 through 5.57.0 are vulnerable to an improper authorization flaw (CWE-863) involving Admin API tokens. The root cause lies in the reconcileTokenPermissionsToUserCeiling function, which fails to account for token permissions containing omitted or null fields . Consequently, e...

CVE-2021-40101

Encuesta XSS combinada con CSRF conduce a la toma de control de cuenta de administrador en Concrete5 8.5.4 Un administrador de Concrete CMS en versiones anteriores a la 9 no tenía que proporcionar su contraseña al cambiar la contraseña de otro usuario. En combinación con CVE-2021-28145 "Concrete...