The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

angryFuzzer

AngryFuzz3r Estado: Desarrollo Acerca del proyecto AngryFuzz3r AngryFuzz3r es una colección de herramientas para pentesting para recopilar información y descubrir vulnerabilidades de los objetivos basada en el proyecto Fuzzedb https://github.com/fuzzdb-project/fuzzdb UrlFuzz3r-AngryFuzz3r1 Descub...

Krawl

Krawl Un servidor honeypot web moderno y personalizable diseñado para detectar y rastrear actividad maliciosa de atacantes y rastreadores web mediante páginas web engañosas, credenciales falsas y canary tokens. Tabla de Contenidos Demo ¿Qué es Krawl? Panel de Krawl Modos de Despliegue Lista de...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

lk_scraper

LinkedIn Scraper Extrae cualquier dato de LinkedIn Instalación $ pip install git+git://github.com/jqueguiner/lkscraper Configuración Usando Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Usando Docker solo para el servidor de Selenium Primero, necesita ejecutar un...

CVE-2017-9833

CVE-2017-9833 Referencia: https://www.cvedetails.com/cve/CVE-2017-9833/ Dork de Shodan: product:"Boa Web Server" 0.94.14rc21 Payload: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow POC:...

PayloadsAllTheThings

Payloads All The Things Una lista de payloads y bypasses útiles para la Seguridad de Aplicaciones Web. ¡Siéntete libre de mejorarlo con tus payloads y técnicas! También puedes contribuir con una 🍻 en persona, o usando el botón de patrocinador. Una versión de visualización alternativa está...

webtech

WebTech Identificar tecnologías utilizadas en sitios web. Más información en el blogpost del lanzamiento. Instalación CLI WebTech está disponible en pip: pip install webtech También se puede instalar mediante setup.py: python setup.py install --user Integración con Burp Descarga Jython 2.7.0...

betwixt

Betwixt te ayudará a analizar el tráfico web fuera del navegador utilizando la interfaz familiar de Chrome DevTools. Instalación Descarga la última versión para tu sistema operativo, crea tu propio paquete o ejecuta Betwixt desde el código fuente. Configuración Para capturar tráfico, tendrás que...

betwixt

Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface. Installing Download the latest release for your operating system, build your own bundle or run Betwixt from the source code. Setting up In order to capture traffic, you'll have to direct it to...

libretto

Libretto Libretto es un conjunto de herramientas para construir integraciones web robustas. Le proporciona a tu agente de codificación un navegador en vivo y una CLI eficiente en tokens para: Inspeccionar páginas en vivo con mínimo overhead de contexto Capturar tráfico de red para realizar...

Sitadel

Sitadel - Web Application Security Scanner | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and implement new features...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

BWASP

BWASP El Proyecto de Seguridad de Aplicaciones Web BoB BWASP es una herramienta de análisis de código abierto para apoyar a los hackers en el análisis manual de vulnerabilidades web. La herramienta BWASP básicamente proporciona información predicha a través del análisis de vulnerabilidades sin...

BlackWidow

ACERCA DE: BlackWidow es un araña web basada en Python para recopilar subdominios, URL, parámetros dinámicos, direcciones de correo electrónico y números de teléfono de un sitio web objetivo. Este proyecto también incluye el fuzzer Inject-X para escanear URL dinámicas en busca de vulnerabilidades...