subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2020-8248

CVE-2020-8248: Pulse Secure VPN Linux Client में Zip वाइल्डकार्ड एक्सप्लॉइट द्वारा विशेषाधिकार वृद्धि रूट SUID एक्ज़ीक्यूटेबल pulsesvc में “doupload” नामक एक फ़ंक्शन है जो वाइल्डकार्ड “” के साथ zip कमांड को असुरक्षित रूप से कॉल करता है। उपयोगकर्ता-नियंत्रित फ़ोल्डर “/.pulsesecure/pulse/” में विशे...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

dnsx

Ein schnelles und vielseitiges DNS-Toolkit für DNS-Abfragen Funktionen • Installation • Nutzung • dnsx ausführen • Wildcard • Hinweise • Discord beitreten dnsx ist ein schnelles und vielseitiges DNS-Toolkit, das für verschiedene Sonden durch die retryabledns-Bibliothek entwickelt wurde. Es...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

CVE-2026-34227

Interface MCP Não Autenticada + Bypass de CORS O servidor MCP do Sliver inicia uma interface SSE não autenticada e responde com Access-Control-Allow-Origin: em todas as respostas. A biblioteca mcp-go não valida o Content-Type, então Simple Requests text/plain ignoram completamente a verificação d...

CVE-2026-47884

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

EUVD-2026-66852

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

sig_finder

SigFinder Ermöglicht das Auffinden binärer Signaturen mit Wildcards in einem vorgegebenen Puffer. Das Wildcard wird durch ? definiert und kann verwendet werden, um ein Nibble zu maskieren. Beispiele für gültige Signaturen: 23 56 12 68 55 0? 34 12 40 ?? 4? 8? e? Die Liste der Signaturen kann als...

CVE-2026-20896

CVE-2026-20896 Gitea 的官方 Docker 镜像（最高至 1.26.2 及包括该版本）在其默认配置中包含了 REVERSEPROXYTRUSTEDPROXIES = 。如果你开启了反向代理登录，这个通配符意味着每个来源 IP 都被视为可信代理，因此任何能访问该端口的人都可以发送 X-WEBAUTH-USER 头部并以任意用户身份登录。无需密码，无需令牌。 我已将此问题报告给 Gitea，并在 1.26.3 / 1.26.4 中修复。本仓库是我自己的分析报告、一个可用的 PoC 以及一个检测工具。这是一个已修补的公开漏洞。 CVE...

CVE-2018-11776

CVE-2018-11776 On August 23, 2018, Apache Struts 2 released its latest security advisory, revealing a high-risk remote code execution vulnerability. Reported by a security researcher from the Semmle Security Research team, this vulnerability is tracked as CVE-2018-11776 S2-057. If the namespace...

sshconfig-lint

sshconfig-lint Lint your /.ssh/config for common mistakes. Checks for duplicate host blocks, missing identity files, wildcard ordering problems, weak algorithms, duplicate directives, and more. Supports Include directives with cycle detection...

subfinder

Ferramenta rápida de enumeração passiva de subdomínios. Recursos • Instalação • Uso • Configuração de API • Biblioteca • Entrar no Discord subfinder é uma ferramenta de descoberta de subdomínios que retorna subdomínios válidos para sites, usando fontes passivas online. Possui uma arquitetura...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

CVE-2026-33149-PoC

CVE-2026-33149 — Host-Header-Injection in Tandoor Recipes Zusammenfassung Tandoor Recipes setzt standardmäßig ALLOWEDHOSTS = '' in settings.py, wodurch Django jeden beliebigen Wert im HTTP--Header ohne Validierung akzeptiert. Die Anwendung verwendet , um in mehreren sicherheitskritischen Kontexte...

Strutter

Strutter Prova de Conceito para CVE-2018-11776, vem completo com a capacidade de pesquisar a API do Shodan por alvos CVE-2018-11776 Apache Struts versões 2.3 a 2.3.34 e 2.5 a 2.5.16 sofrem de possível Execução Remota de Código ao usar resultados sem namespace e, ao mesmo tempo, suas ações...

CVE-2026-8023

CVE-2026-8023 — Travessia de caminho no static-fs HTTP do Zephyr PoC Travessia de caminho sem autenticação no manipulador static-fs do servidor HTTP do Zephyr subsys/net/lib/http quando a correspondência de recurso curinga CONFIGHTTPSERVERRESOURCEWILDCARD=y é usada com HTTPRESOURCETYPESTATICFS...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 개념 증명 Laravel 프레임워크≤ 12.0.0의 파일 업로드 검증 우회 취약점인 CVE-2025-27515 에 대한 실용적인 시연입니다. 취약점 개요 CVE-2025-27515 는 Laravel 애플리케이션이 와일드카드 검증 패턴files.을 사용할 때 공격자가 파일 업로드 제한을 우회할 수 있게 하는 검증 우회 취약점입니다. 이 취약점은 Laravel이 배열 기반 파일 업로드를 처리하는 방식의 약점을 악용하여 악성 파일을 업로드할 수 있게 합니다. 심각도: 중간/높음 CWE: CWE-20 부적절...

CVE-2023-20860

Per lo studio CVE-2023-20860: Bypass di sicurezza con pattern wildcard doppio senza prefisso Spring Framework 6.0.7 e 5.3.26 correggono cve-2023-20860 e cve-2023-20861...

wildpwn

Prima di tutto! Leggi: https://www.exploit-db.com/papers/33930/ Utilizzo base Funziona più o meno così: root@kitploit: usage: wildpwn.py -h --file FILE payload folder Tool to generate unix wildcard attacks positional arguments: payload Payload to use: combined | tar | rsync folder Where to write...