paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

ChatGPT个人专用版 - Server Side Request Forgery

A Server-Side Request Forgery SSRF in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter. id: CVE-2024-27564 info: name: ChatGPT个人专用版 - Server Side Request Forgery author: DhiyaneshDK...

TheTimeMachine

🚀 TheTimeMachine v3.0 - 将 Wayback 武器化，用于侦察、漏洞赏金、OSINT 等！ 你在电影和漫画里听说过时间旅行，对吧？好吧，这不再是虚构的了 😎。 TheTimeMachine 通过从 Wayback Machine 抓取存档 URL，让你能够挖掘任何 Web 应用的过去——并帮助你发现敏感、被遗忘或已弃用的端点，以便进一步利用。 无论你是热衷于漏洞赏金、红队行动，还是单纯热爱经典侦察，这个工具都是为了让我自己的侦察工作流更快、更简洁、更高效而构建的。不再需要同时折腾多个脚本——TheTimeMachine 一次搞定。 🧩 参展记录 会议| 年份| 主题...

CVE-2023-0099-exploit

CVE-2023-0099-エクスプロイト エクスプロイトタイトル: simple urls 115 - 反射型XSS Google Dork: エクスプロイト作者: AmirZargham ベンダーホームページ: https://getlasso.co/ ソフトウェアリンク: https://wordpress.org/plugins/simple-urls/ バージョン: 115 テスト環境: firefox,chrome CVE: CVE-2023-0099 CWE: CWE-79 プラットフォーム: 複数 タイプ: WebApps 説明 Simple URLs WordPress...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Control de acceso incorrecto - Escalada de privilegios Descripción : El control de acceso incorrecto en School Fees Management System v1.0 permite a los atacantes escalar privilegios y realizar acciones administrativas, incluyendo agregar y...

CVE-2026-61597 djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, many djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it...

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

Impact Many djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - 概念実証 このリポジトリは、特定のバージョンのNext.jsに影響を与える高深刻度の脆弱性 CVE-2025-29927 を悪用するための最小限の概念実証 PoC を含んでいます。この脆弱性により、細工されたURLを通じて内部アプリケーションファイルへの不正アクセスが可能になります。 ⚠️ 免責事項 このコードは教育目的および許可されたセキュリティ研究 のみを目的としています。所有していない、または明示的なテスト許可を得ていないシステムでは使用しないでください。 🚀 はじめに 🔧 前提条件 Docker Git Python3.8+...

authkeysync

AuthKeySync 自动从远程 URL 同步 SSH 公钥到您的服务器 📖 完整文档 问题 跨多台服务器管理 SSH 访问非常痛苦： 团队成员加入或离开时，你需要在每台服务器上更新 authorizedkeys 开发人员轮换 SSH 密钥，而现在你有 20 台服务器需要更新 你正在使用基础设施即代码，但 SSH 密钥管理仍是手动的 自制 bash 脚本进行密钥管理往往写得不好、不安全，或者存在细微的 bug，可能导致你无法登录服务器 你想使用 GitHub/GitLab 密钥，但到处复制太繁琐 解决方案 AuthKeySync 是一个轻量级 CLI，它从...

tirith

tirith ブラウザならこれを検知できる。ターミナルではできない。 Website | Docs | SKILL.md | Changelog | Releases 独立したオープンソースプロジェクト。ホスティングは Vercel Open Source Program（Spring 2026 Cohort）の支援を受けています。 違いがわかりますか？ curl -sSL https://install.example-cli.dev | bash safe curl -sSL https://іnstall.example-clі.dev | bash compromised...

EUVD-2026-81071

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to...

signy

signy 小型デバイス向けの署名付きURL。 背景 signy は、非対称暗号を使用して組み込みデバイス上で署名付きURLを生成するためのライブラリです。署名付きURLは通常、コンテンツデリバリーネットワーク CDN...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...