mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE 스캐너 작성자: im-ezboy Zoomeye 검색을 사용하는 Next.js RCECVE-2025-55182 스캐너입니다. Zoomeye 쿼리를 통해 대상을 찾고 제공된 익스플로잇 페이로드로 테스트합니다. 기능 기본적으로 두 가지 집중된 Zoomeye dork 사용: http.header="Vary: RSC, Next-Router-State-Tree" vul.cve="CVE-2025-55182" 요청 시간 초과 제어가 포함된 병렬 스캐닝기본 20개 스레드. 취약한 대상을...

Joomla3.7-SQLi-CVE-2017-8917

Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...

CVE-2021-22986

CVE-2021-22986 Este es un script simple para determinar si una IP es vulnerable a este CVE a partir de direcciones IP masivas. Para encontrar direcciones IP masivas, use la CLI de shodan o zoomeye. Guarde todas las IP en un archivo llamado "testips.txt"...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

cloudbunny

CloudBunny CloudBunny es una herramienta para capturar el servidor de origen que utiliza un WAF como proxy o protección. Puedes leer más sobre la herramienta aquí: https://tinyurl.com/y8p48wb3 Cómo funciona En esta herramienta utilizamos tres motores de búsqueda para buscar información de dominio...

Exploit for Deserialization of Untrusted Data in Facebook React

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...

PT-2024-9206

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form

🚀 HashForm Exploit Script This script demonstrates the exploi...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...

pocsuite3

This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...

pocsuite3

This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...

PT-2023-4877 · Jscape · Jscape Mft Server

Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...

Exploit for Deserialization of Untrusted Data in Spip

CVE-2023-27372 SPIP -v -o report.txt 🔍 Reconnaissance M...