CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Aviso legal: Este script se proporciona 'tal cual' y exclusivamente con fines educativos. Se recomienda encarecidamente a los usuarios que actúen con precaución y lo utilicen dentro de los límites de las consideraciones legales y éticas. Descripción Ejecuta varias...

web-brutator

Web Brutator Bruteforce rápido y modular de interfaces web 📥 Instalación python3 -m pip install -r requirements.txt ⏩ Uso $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / | / || |/ || /| /|| /...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install python3 -m pip install -r requirements.txt ⏩ Usage $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / | / || |/ || /| /|| / / / /...

CVE-2018-7600

CVE-2018-7600 CVE-2018-7600 Exploit Cambia TARGET en exploit.py $ python3 exploit.py Success: Check http://127.0.0.1:8080/hello.txt...

miasma

🌀 Miasma AI companies continually scrape the internet at an enormous scale, swallowing up all of its contents to use as training data for their next models. If you have a public website, they are already stealing your work. Miasma is here to help you fight back! Spin up the server and point any...

hindsight

Hindsight Forense de historial de Internet para Google Chrome/Chromium y Mozilla Firefox Hindsight es una herramienta gratuita para analizar artefactos web. Comenzó con el historial de navegación del navegador Google Chrome, se ha ampliado para admitir otras aplicaciones basadas en Chromium y aho...

xcrawl3r

xcrawl3r xcrawl3r es una utilidad de línea de comandos diseñada para rastrear recursivamente páginas web en busca de URLs. Funciona recorriendo activamente los sitios web, siguiendo enlaces incrustados en páginas web y analizando archivos incluyendo sitemaps y robots.txt para descubrir cada URL. ...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

natlas

Natlas Summary You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. Natlas' objective is to make it easy to perform continuous scanning and review collecte...

natlas

Natlas Resumen Tienes muchos mapas y se están volviendo bastante difíciles de manejar. ¿Qué haces? Los pones en un libro y lo llamas atlas. Esto es similar, excepto que es un sitio web y es una colección de nmaps. El objetivo de Natlas es facilitar la realización de escaneos continuos y la revisi...

eyeballer

Eyeballer Échale un vistazo rápido a esas capturas de pantalla. Eyeballer está diseñado para pruebas de penetración de red de gran alcance donde necesitas encontrar objetivos "interesantes" de un gran conjunto de hosts basados en web. Utiliza tu herramienta de captura de pantalla favorita como...

ExtAnalysis

Features • Installation • Use • Modules Used • Screenshots • License With ExtAnalysis you can : Download & Analyze Extensions From: Chrome Web Store Firefox Addons Analyze Installed Extensions of: Google Chrome Mozilla Firefox Opera Browser Coming Soon Upload and Scan Extensions. Supported format...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

on-device-browser-agent

Local Browser - Automatización Web con IA en Dispositivo Pronto lanzaremos soporte para runanywhere-web-sdk en nuestro repositorio principal: échale un vistazo: https://github.com/RunanywhereAI/runanywhere-sdks Una extensión de Chrome que utiliza WebLLM para ejecutar automatización web con IA...

CVE-2026-78407

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

CVE-2026-17189

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

CVE-2026-11936

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2026-11930

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers...

xsscrapy

xsscrapy Fast, thorough, XSS/SQLi spider. Give it a URL and it'll test every link it finds for cross-site scripting and some SQL injection vulnerabilities. See FAQ for more details about SQLi detection. From within the main folder run: ./xsscrapy.py -u http://example.com If you wish to login then...