cloudbunny

CloudBunny CloudBunny é uma ferramenta para capturar o servidor de origem que utiliza um WAF como proxy ou proteção. Você pode ler mais sobre a ferramenta aqui: https://tinyurl.com/y8p48wb3 Como funciona Nesta ferramenta usamos três mecanismos de busca para pesquisar informações de domínio: Shoda...

Joomla3.7-SQLi-CVE-2017-8917

Zusammenfassung Es ist ein einfaches Skript, um mit der ZoomEye-API Joomla-3.7-SQL-Injection CVE-2017-8917 im Batch zu scannen. Verwendung git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Los!!! Referenz...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

CVE-2021-22986

CVE-2021-22986 هذا سكريبت بسيط لتحديد ما إذا كان عنوان IP معرّضًا لهذا CVE من مجموعة كبيرة من عناوين IP. للعثور على عناوين IP بكميات كبيرة، استخدم shodan أو zoomeye cli. احفظ جميع عناوين IP في ملف باسم "testips.txt"...

Mass-exploit-CVE-2022-29464

Miau Miau Miau! Nur ein Massenexploit basierend auf einem Python PoC für WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE-Fehler CVE-2022-29464. Miau Miau Miau? Anforderungen? Python3 Shodan Zoomeye Ein Gehirn Was ist dieses Tool? Dies ist ein Massen-Autoscan-Exploit für CVE-2022-29464 basierend au...

CVE-2025-55182-zoomeye

Scanner RCE per Next.js su Zoomeye Autore: im-ezboy Scanner per la RCE di Next.js CVE-2025-55182 che utilizza la ricerca di Zoomeye. Trova i target tramite query Zoomeye e li testa con il payload dell'exploit fornito. Caratteristiche Due dork Zoomeye mirati di default: http.header="Vary: RSC,...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

Exploit for Deserialization of Untrusted Data in Facebook React

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...

PT-2024-9206

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form

🚀 HashForm Exploit Script This script demonstrates the exploi...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...

pocsuite3

This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...

pocsuite3

This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...

PT-2023-4877 · Jscape · Jscape Mft Server

Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...

Exploit for Deserialization of Untrusted Data in Spip

CVE-2023-27372 SPIP -v -o report.txt 🔍 Reconnaissance M...