leaklens

(★ 62)

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

Owner Repos

raptor-loop-hunt ★ 209

RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill

Python
fastjson-jsontype-rce-lab ★ 204

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.

Python
CVE-2022-22963 ★ 115

CVE-2022-22963 PoC

Python
hikvision ★ 66

Hikvision log4j PoC

Python
mariadb-13-rce-lab ★ 62

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and raptor-loop-hunt.

Python
CVE-2024-20931 ★ 61

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

File Explorer

ZIP Download
  • .gitignore
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • go.mod
  • go.sum
  • leaklens.go
  • leaklens_test.go
  • LICENSE
  • Makefile
  • NOTICE
  • README.md

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Link
Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

brew install

View Details ▼

Install a Homebrew formula or cask.

brew install {{formula|cask}}

Install a formula/cask:

brew install {{[-s|--build-from-source]}} {{formula}}

Build and install a formula from source (dependencies will still be installed from bottles):

brew install {{[-n|--dry-run]}} {{formula|cask}}

Download the manifest, print what would be installed but don't actually install anything:

🔍

fmt

View Details ▼

Reformat a text file by joining its paragraphs and limiting the line width to a number of characters (75 by default).

fmt {{path/to/file}}

Reformat a file:

fmt {{[-w|--width]}} {{n}} {{path/to/file}}

Reformat a file producing output lines of (at most) `n` characters:

fmt {{[-s|--split-only]}} {{path/to/file}}

Reformat a file without joining lines shorter than the given width together:

🔍

go env

View Details ▼

Manage environment variables used by the Go toolchain.

go env

Show all environment variables:

go env {{GOPATH}}

Show a specific environment variable:

go env -w {{GOBIN}}={{path/to/directory}}

Set an environment variable to a value:

🔍

go get

View Details ▼

Add a dependency package, or download packages in legacy GOPATH mode.
Note: `./...` is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory.

go get {{example.com/pkg}}

Add a specified package to `go.mod` in module-mode or install the package in GOPATH-mode:

go get {{example.com/pkg}}@{{v1.2.3}}

Modify the package with a given version in module-aware mode:

go get {{example.com/pkg}}@{{none}}

Remove a specified package:

🔍

go install

View Details ▼

Compile and install packages named by the import paths.

go install

Compile and install the current package:

go install {{path/to/package}}

Compile and install a specific local package:

go install {{golang.org/x/tools/gopls}}@{{latest}}

Install the latest version of a program, ignoring `go.mod` in the current directory:

🔍

go test

View Details ▼

Test Go packages (files have to end with `_test.go`).
Note: `./...` is a Go package pattern understood by Go tooling. It matches the current package and all packages recursively under the current directory.

go test

Test the package found in the current directory:

go test -v

[v]erbosely test the package in the current directory:

go test -v ./...

Test the packages in the current directory and all subdirectories:

🔍

pkg-config

View Details ▼

Provide the details of installed libraries for compiling applications.

pkg-config --libs {{library1 library2 ...}}

Get the list of libraries and their dependencies:

pkg-config --cflags --libs {{library1 library2 ...}}

Get the list of libraries, their dependencies, and proper cflags for gcc:

pkg-config --modversion {{module1 module2 ...}}

Print the version of the linked modules:

🔍

standard

View Details ▼

The JavaScript Standard Style tool for linting and fixing JavaScript code.

standard

Lint all JavaScript source files in the current directory:

standard {{path/to/file1 path/to/file2 ...}}

Lint specific JavaScript file(s):

standard --fix

Apply automatic fixes during linting:

🔍

apt-get

View Details ▼

Debian and Ubuntu package management utility.
Search for packages using `apt-cache`.
It is recommended to use `apt` when used interactively in Ubuntu versions 16.04 and later.

sudo apt-get update

Update the list of available packages and versions (it's recommended to run this before other `apt-get` commands):

sudo apt-get install {{package}}

Install a package, or update it to the latest available version:

sudo apt-get remove {{package}}

Remove a package:

🔍

dnf install

View Details ▼

Install packages on Red Hat-based distributions.

sudo dnf {{[in|install]}} {{package1 package2 ...}}

Install packages by name:

sudo dnf {{[in|install]}} {{path/to/file}}

Install a package from a local file:

sudo dnf {{[in|install]}} {{https://example.com/package.rpm}}

Install a package from the internet:

// repository documentation