CVE-2024-38077-RDLCheck

CVE-2024-38077-RDLCheck Detect if the RDL service is running, quickly identify affected assets Usage: Install impacket root@kitploit: git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . Script Usage: root@kitploit: python3 RDLCheck.py usage: RDLCheck.py -h -ip I...

CVE-2021-22005

CVE-2021-22005 VMware vCenter RCE CVE-2021-22005 one-liner mass checker cat vmwarecenters.txt | while read S do; do curl --connect-timeout 15 --max-time 30 --silent --insecure --user-agent "vAPI/2.100.0 Java/1.8.0261 Linux; 4.19.160-6.ph3; amd64" -X POST...

PySCTChecker

PySCTChecker Descripción Este es un script Python rápido y sencillo para verificar si un dominio implementa correctamente Certificate Transparency. Si es así, es posible observar cómo se implementa Certificate Transparency en el lado del servidor. Cuando un servidor implementa Certificate...

CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 POC root@kitploit: Usage: python3 CVE-2023-26256.py -h...

DorkNet

DorkNet Script de Python impulsado por Selenium para automatizar la búsqueda en la web de aplicaciones vulnerables. DorkNet puede tomar un único dork o una lista de dorks como argumentos. Después de pasar los argumentos de línea de comandos adecuados, el script utilizará Selenium y Geckodriver pa...

AutoNessus

AutoNessus This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan. It may be helpful to create a cron job/scheduled task for automating...

SambaCry

SambaCry CVE-2017-7494.nse - Nmap Detection Script...

ExWA

ExWa WhatsApp for CLI with API ExWa es una herramienta simple escrita en PHP, que se utiliza para usar una aplicación de WhatsApp en su versión CLI con la ayuda de una API del sitio rapiwha.com Instalación : $ git clone https://github.com/dalpan/ExWa $ cd ExWa $ php exwa.php Uso : Regístrese...

CVE-2024-21413

CVE-2024-21413 This Python script is used to abuse the CVE-2024-21413 coined "MonikerLink" TryHackMe Room: MonikerLink Assumptions This PoC has been created for a lab environment which means the server needs to be configured in a specific setting i.e. TLS authentication is not supported for...

CVE-2018-2380

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host...

iconvfix

iconvfix Script Bash para parchear CVE-2024-2961 Actualmente funciona en CentOS7. Sin garantía, no usar en sistemas de producción, esto es solo una ayuda interna : Uso tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2019-19652

CVE-2019-19652 Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. An admin user can instruct the updater script to downgrade to another version instead of upgrade, reintroducing previous flaws. Due to the lack of a CSRF token this attack can also be used in a CSRF attack, meaning an...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...

CVE-2023-41064

LibWebP vulnerability CVE-2023-41064 Code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP file an image format with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...

cve-2022-29464

cve-2022-29464 cve-2022-29464 Batch Script Referenced the exploit by MzzdToT master, wrote a cve-2022-29464 batch detection script python3 rce.py -f file.txt...

GhostInTheNet

GhostInTheNet Ultimate Network Stealther que convierte a Linux en un Fantasma en la Red y protege contra MITM/DOS/escaneo Propiedades: Invisibilidad en la red Anonimato en la red Protege contra MITM/DOS Transparente Multiplataforma Minimalista Dependencias: Linux 2.4.26+ - funcionará en cualquier...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2022-29455

CVE-2022-29455 Mass Scanner for CVE-2022-29455 on Elementor Plugins Wordpress Usage : python cve-2022-29455 list.txt threads...

CVE-2024-26581-Checker

CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...

CVE-2024-6387

OpenSSH CVE Scanner The OpenSSH CVE Scanner is a Python script designed to scan multiple SSH targets for vulnerabilities based on their OpenSSH version. It utilizes threading for concurrent scanning and integrates logging with colored output for enhanced visibility. Features Multi-threaded...