5112 matches found
CVE-2023-20198
CVE 2023-20198 Introducción El componente de interfaz web del software Cisco IOS XE tiene una vulnerabilidad previamente desconocida que, cuando se expone a internet o a redes no confiables, ya está siendo explotada activamente, según Cisco. Debido a esta vulnerabilidad, un atacante remoto no...
Telewreck
Telewreck Una extensión de Burp para detectar y explotar versiones de Telerik Web UI vulnerables a CVE-2017-9248. Esta extensión se basa en la herramienta de explotación original escrita por Paul Taylor @bao7uo que está disponible en https://github.com/bao7uo/dpcrypto. Créditos y muchas gracias a...
CVE-2023-20198-Scanner
Cisco IOS XE CVE-2023-20198 Scanner A Python wrapper script for scanning Cisco IOS XE devices for the Web UI Authentication Vulnerability CVE-2023-20198 using a specific curl payload. Features Scans multiple targets from a file or command line Uses exact curl command as specified Automatically...
CVE-2026-40179-PoC
CVE-2026-40179 — Prometheus stored XSS via remotewrite A minimal, dependency-light proof of concept for CVE-2026-40179 GHSA-vffh-x6r8-xx99: stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remotewrite endpoint. The vulnerability Prometheus 3.x renders...
http-breakout-proxy
HTTP Breakout Proxy A lightweight HTTP/HTTPS intercepting proxy and traffic analysis tool written in Go, with a web-based UI for inspecting, filtering, coloring, and annotating captured traffic in real time. Overview HTTP Breakout Proxy functions as both an HTTP and HTTPS MITM proxy and a live...
xpfarm
XPFarm Un escáner de vulnerabilidades de código abierto que envuelve herramientas de seguridad de código abierto conocidas tras una única interfaz web. Índice Sección| Descripción ---|--- Por qué| Motivación y filosofía detrás de XPFarm Herramientas incluidas| Las 10 herramientas de código abiert...
IotShark
cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...
xpfarm
XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...
inspector
MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides three ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...
scoringengine
Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...
Exihibitor-RCE
Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...
permission-manager
Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...
SteppingStones
Stepping Stones Purpose A hub for Red Team activity to aid in record keeping, situational awareness and reporting. Stepping Stones provides a web based UI for the team to log activity and generate report snippets. The UI is intended to be rapid enough to be used throughout the engagement, not jus...
evtx
EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...
SnitchDNS
!CAUTION Este repositorio no tiene mantenimiento, visita https://github.com/sadreck/SnitchDNS para la versión más reciente. SnitchDNS SnitchDNS es un servidor DNS basado en base de datos con una interfaz web, escrito en Python y Twisted, que facilita la administración de DNS al aplicar todos los...
vulnerablecode
VulnerableCode VulnerableCode es una base de datos de vulnerabilidades de paquetes de software con interfaz web y API. ¿Por qué usar VulnerableCode? VulnerableCode proporciona una interfaz web y una API para acceder a una base de datos de vulnerabilidades conocidas de paquetes de software, con...
dp_crypto
dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...
jaeles
!IMPORTANT This repository has been archived and is no longer maintained. Check out github.com/vigolium/vigolium — a brand new scanner that I made that's better in every way. Jaeles is a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner...
CVE-2026-63766_exploit
CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...