84 matches found
CVE-2025-55182-zoomeye
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...
mihari
mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...
Joomla3.7-SQLi-CVE-2017-8917
Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...
cloudbunny
CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...
mec
mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...
Mass-exploit-CVE-2022-29464
Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...
melting-cobalt
melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...
CVE-2021-22986
CVE-2021-22986 This is a simple script to determine whether an IP is vulnerable to this CVE from a mass ip addresses. For finding mass ip addresses use shodan or zoomeye cli. Save all the ips in a file name here "testips.txt"...
Exploit for Deserialization of Untrusted Data in Facebook React
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...
PT-2024-9206
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...
PT-2024-7225 · Pfsense · Pfsense
Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...
Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware
🚀 CVE-2024-29269 Exploit This repository contains an exploit...
Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form
🚀 HashForm Exploit Script This script demonstrates the exploi...
Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware
🚀 CVE-2024-29269 Exploit This repository contains an exploit...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...
pocsuite3
This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...
pocsuite3
This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...
Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware
CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...
PT-2023-4877 · Jscape · Jscape Mft Server
Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...