spider

Spider Rust 向けの最速の Web クローラーおよびスクレイパー。 spider.cloud · ガイド · ドキュメント · 例 · Discord Spider は、Rust で書かれた並行処理を第一に設計されたクローリングエンジンです。ページが到着するたびにストリーミングし、JavaScript のレンダリングは必要なページのみに行い、コードを変更せずに単一スクリプトから分散クラスタへスケールします。同じエンジンが Spider Cloud で稼働しているため、ローカルでプロトタイピングを行い、設定変更一つでマネージドインフラへ移行できます。 クラウドで始める...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

patch-checker

PatchChecker 这是运行在 https://patchchecker.com 上的服务的代码库。 简而言之，PatchChecker 是一个 Web 应用程序（基于 Flask 运行），提供与 Watson 类似的输出。然而，使用 PatchChecker 无需在目标机器上执行二进制文件。 该项目还包含一个网络爬虫，它会利用 Microsoft 网站上的信息自动更新 PatchChecker 的数据库，从而提供一种更可扩展且更易用的解决方案，用于查找 Windows 系统已（或未）修补的 CVE。 此外，任何其他 CVE 都可以添加到数据收集器的输入中，只要它们在...

linkedin2username

linkedin2username OSINT 도구: LinkedIn에서 회사별 사용자 이름 목록 생성. 이는 순수 웹 스크래퍼이며, API 키가 필요하지 않습니다. 유효한 LinkedIn 사용자 이름과 비밀번호로 로그인하면, 지정한 회사의 모든 직원에 대해 여러 가지 가능한 사용자 이름 형식의 목록을 생성합니다. 다음과 같은 결과를 얻을 수 있습니다: first.last.txt: Joe.Schmoe 형식의 사용자 이름 f.last.txt: J.Schmoe 형식의 사용자 이름 flast.txt: JSchmoe 형식의 사용자 이름...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriver --version Ma...

ClickonceHunter

ClickonceHunter Less SmartScreen More Caffeine: ClickOnce AbUse for Trusted Code Execution カンファレンスプレゼンテーション / ブログ記事 に合わせて、0xthirteen と私がリリースしたツールです。 公開されている ClickOnce アプリケーションを検索エンジンからスクレイピングするために、通常の HTTP リクエストに加えて chromedp の両方を使用する Golang 製 Web スクレイパーです。AWS API Gateway のソース IP...

Bugs-feed

Bug's feed Bug's feed는 최신 뉴스, 동영상, CVE, 취약점 등을 검색할 수 있는 로컬 호스팅 포털입니다. PWA 애플리케이션으로 구현되어 브라우저를 벗어나 데스크톱 애플리케이션처럼 사용할 수 있습니다. 다양한 탭을 탐색하여 최신 버그를 확인하거나 모든 탭에서 한 번에 검색할 수 있습니다. 해시태그와 비디오 채널을 원하는 대로 수정할 수 있는 설정 창이 함께 제공됩니다. 🐝 프로젝트 소개 ⚠️ 이것은 저의 첫 번째 대규모 프로젝트입니다. 완벽하지 않으며 개선이 필요합니다. 기여 섹션을 참조하세요. 해킹 및 개발...

cve-2024-56800-poc

cve-2024-56800 POC 참고 자료 https://nvd.nist.gov/vuln/detail/CVE-2024-56800 https://github.com/firecrawl/firecrawl/commit/4d1f92f4c8c36403022428285a03621fd90d62ec https://github.com/firecrawl/firecrawl/security/advisories/GHSA-vjp8-2wgg-p734 취약점 Firecrawl은 웹페이지의 콘텐츠를 추출할 수 있는 웹 스크래퍼입니다. 1.1.1 이전 버전에...

CVE-2026-43995

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients node-fetch, axios instead of using the secured wrapper. These tools include 1 OpenAPIToolkit/OpenAPIToolkit.ts, 2...

CVE-2026-7146

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

CVE-2026-43995 Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients node-fetch, axios instead of using the secured wrapper. These tools include 1 OpenAPIToolkit/OpenAPIToolkit.ts, 2...

CVE-2026-7146

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

CVE-2026-7146 AlejandroArciniegas mcp-data-vis HTTP Request server.js axios server-side request forgery

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

CVE-2026-7146

CVE-2026-7146 affects AlejandroArciniegas mcp-data-vis (up to commit de5a51525a69822290eaee569a1ab447b490746d). The vulnerability targets the function axios in the file src/servers/web-scraper/server.js of the HTTP Request Handler component, enabling server-side request forgery . The description ...

EUVD-2026-25905

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

CVE-2026-7146

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

PT-2026-35504

A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d. Affected by this vulnerability is the function axios of the file src/servers/web-scraper/server.js of the component HTTP Request Handler. Such manipulation leads to...

MCP Data Visualization & Experimentation Platform 代码问题漏洞

MCP Data Visualization & Experimentation Platform is a large model context protocol developed by alejandro and his team. There are code-related vulnerabilities in MCP Data Visualization & Experimentation Platform. These vulnerabilities stem from improper use of the axios function in the...