CVE-2026-15396 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

EUVD-2026-78068

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

CVE-2026-15634 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

EUVD-2026-78060

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

CVE-2026-15634

CVE-2026-15634 is an HTTP request smuggling vulnerability (CWE-444) in IBM WebSphere Application Server 9.0, 8.5, and Liberty (17.0.0.3–26.0.0.8), caused by improper parsing of the HTTP transfer-encoding request header . A remote, unauthenticated attacker can send a specially crafted header to po...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated This repository contains a modified version of the original Proof-of-Concept PoC for CVE-2023-5561. The original PoC, which can be found here, sends a high volume of requests in parallel, which may trigger Web Application Firewalls WAFs or cause the server to block the...

recollapse

REcollapse REcollapse는 블랙박스 정규 표현식 퍼징을 도와주는 도구로, 웹 애플리케이션의 유효성 검사를 우회하고 정규화를 발견하는 데 사용됩니다. 또한 WAF 및 취약한 취약점 완화 조치를 우회하는 데 도움이 될 수 있습니다. 자세한 내용은 REcollapse 블로그 게시물을 확인하세요. 이 도구의 목표는 테스트를 위한 페이로드를 생성하는 것입니다. 실제 퍼징은 Burp intruder, Caido automate, ffuf 등과 같은 다른 도구를 사용하여 수행해야 합니다. 설치 요구 사항 : Python 3...

Burp-Encode-IP

소개 이 확장 프로그램은 IP 주소를 잘 알려지지 않은 여러 인코딩 기술로 변환합니다. 이 기술은 SSRF Server-Side Request Forgery, Open Redirect 또는 RFI Remote File Inclusion와 같은 취약점을 테스트하는 데 중점을 둡니다. 요약 간편 설치 Burp Pro가 있다면 BApp에서 직접 설치할 수 있습니다: 확장 프로그램에 ⭐⭐⭐⭐⭐ 별점을 남기는 것을 잊지 마세요 ; 설치 Extensions - Installed - Add - burp-encode-ip.py로 이동합니다...

Log4Shell

CVE-2021-44228: Log4j / Log4Shell Security Research Summary This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell. Threat Intel Mitigations / Fixes Malware Reports Advisory IOCs / Callback Domains / IP Addresses...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 これは、BIG-IP ASMデバイス上のすべてのポリシーに対して、CVE-2021-44228に関連するシグネチャを強制適用します。 概要 このスクリプトは、以下のリストに含まれるCVE-2021-44228に関連するすべてのシグネチャを、Adv. WAF/ASMのすべてのポリシーに対してブロッキングモードで強制適用します。 sigs = '200104768', '200104769', '200004450', '200004451','200004474','200104770','200104771'...

log4j-rce-detect-waf-bypass

This repository does not have a README...

Imperva_gzip_bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

Nextjs_RCE_Exploit_Tool

Next.js RCE Exploit Tool CVE-2025-55182 !CAUTION 免责声明 / Disclaimer 本工具仅供安全研究与教学 使用。用户在使用本工具进行测试时，必须确保已获得目标系统的合法授权 。 严禁用于非授权的渗透测试、恶意攻击或任何非法用途。用户感知和利用漏洞所产生的一切风险与法律后果由用户自行承担 ，与本项目开发者无关。 如果不接受此条款，请立即停止下载或使用本工具。 本工具基于公开文章开发，不提供编译好的二进制发布版本，请自行审计代码并编译。 🙏 致谢 / Credits...

log4j-scan

log4j-scan 취약한 log4j 호스트를 찾기 위한 완전 자동화된 정확하고 광범위한 스캐너 기능 URL 목록 지원 60개 이상의 HTTP 요청 헤더 퍼징 기존 도구처럼 3-4개 헤더만 퍼징하지 않음 HTTP POST 데이터 파라미터 퍼징 JSON 데이터 파라미터 퍼징 취약점 발견 및 검증을 위한 DNS 콜백 지원 WAF 우회 페이로드 🚨 공지 2022년 10월 20일 FullHunt가 Apache Commons Text RCECVE-2022-42889 식별 업데이트를 출시했습니다. Apache Commons Text RC...

pinky

Web脆弱性を悪用した後は、ほぼ常に次のステップとしてWebshellをアップロードすることになりますが、Cloudflareや新しい世代のファイアウォールなどのサービスは、攻撃者がHTTPまたはHTTPSを介してターゲット上でコマンドを実行するのを防ぐのに非常に優れています。一方、テキストコンテンツのフィルタリングやアプリケーションのホワイトリストポリシーは、最小限の労力で簡単に悪用される可能性があり、pinkyはそのPoCです 。 pinkyの違いは？ まず、pinky...

xss_vulnerability_challenges

XSS 취약점 시나리오 도전 과제 이 저장소는 몇 가지 XSS 취약점 도전 과제를 포함한 Docker 기반 PHP 애플리케이션입니다. 도전 과제의 아이디어는 다음과 같습니다: JavaScript 유효성 검사 우회 html 엔티티 우회 WAF 우회 블랙리스트 검증 우회 기본 XSS 검증 우회 XSS 공격을 위한 WAF 더블 인코딩 우회 이스케이프 문자 우회를 통한 XSS 공격 Docker를 사용한 빠른 시작 Docker Hub 사용 가장 빠름: 1. 도전 과제에 접근하려면 docker가 설치되어 있어야 합니다. 2. 다음 명령어...

FortiWeb-cve-2025-64446-RCE-exploit

FortiWeb CVE-2025-64446 RCE Exploit Professional security research & vulnerability assessment framework Installation · Quick Start · Usage · Architecture · CLI Reference · Disclaimer Overview FortiWeb Research Tool is a Python assessment framework for authorized detection and analysis of...

CVE-2025-55182-Waf

Next.js/React RSC Scanner & Exploit - RCE This tool is designed for security researchers and penetration testers to detect and exploit the CVE-2025-55182 vulnerability in Next.js/React RSC applications. It provides multiple scanning modes, exploitation features, and WAF bypass techniques...

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF Educational / defensive purpose : this lab contains a deliberately vulnerable app Log4j 2.14.1 and a JNDI exploit kit, ONLY for learning how to detect and block Log4Shell in an isolated environment. Do not deploy to the Internet, do not use to attack...

py-log4shellscanner

PY-Log4ShellScanner 一个简单的单文件DNSLog服务器，带有HTTP端点用于日志检索 致谢 基于fullhunt.io的Log4jScanner，通过多线程和自定义DNS回调服务器进行了修改 功能 支持URL列表 针对60多个HTTP请求头进行模糊测试，并能够添加自定义头 针对HTTP POST数据参数进行模糊测试 针对JSON数据参数进行模糊测试 多线程搜索 通过自托管的scheibling/py-dnslogserver实现DNS回调 WAF绕过Payload 使用方法 准备工作 root@kitploit: pip3 install -r...