PocList

PocList A collection of self-written vulnerability POCs and EXPs. After specifying the URL file, the POC script can perform multi-threaded batch scanning of targets for verification; the EXP script can exploit vulnerabilities, such as file reading, uploading webshells, command execution, etc...

cve-2020-0796-scanner

cve-2020-0796-scanner This project is base on SMBGhost which is used for scanning CVE-2020-0796 - SMBv3 RCE vulnerability. only add batch scanning function. Usage root@kitploit: python3 cve-2020-0796-scanner.py -t Workarounds root@kitploit: Set-ItemProperty -Path...

vulmap

🌟 Vulmap - Herramientas de escaneo y verificación de vulnerabilidades web Haga clic aquí para la versión en inglés Vulmap es una herramienta de escaneo y verificación de vulnerabilidades web que puede escanear aplicaciones web y cuenta con funcionalidad de explotación. Actualmente, las aplicacion...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

CVE-2022-26134

CVE-2022-26134 ATLASSIAN-Confluence RCE Installation root@kitploit: git clone https://github.com/kelemaoya/CVE-2022-26134.git cd CVE-2022-26134 pip3 install -r requirements.txt Usage Single URL pocsuite -r ../CVE-2022-26134.py -u url --verify Batch URLs pocsuite -r ../CVE-2022-26134.py -f url.txt...

Ripple20

Ripple20 CVE-2020-11898 Suite de Detección - Paquete Completo Estado: ✅ Listo para producción | Versión: 2.0 | 📦 Lo que incluye Este paquete integral contiene todo lo necesario para detectar, analizar y remediar vulnerabilidades Ripple20 CVE-2020-11898 en su organización. Resumen de archivos 1...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Install root@kitploit: $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Usage root@kitploit: usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help show thi...

SpEL

SpEL Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）批量检测工具 使用方法 文件中逐行写入需要检测的URL，参数-TF 指定文件 -t 并发数量 执行效果 玉兔安全致力于web安全、红蓝对抗、内网渗透、免杀技巧、安全工具系列干货分享。更多安全工具分享，欢迎关注玉兔安全公众号！...

CVE-2025-49132

CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation root@kitploit: pip install -r requirements-standalone.txt Manual...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Escaneo/explotación por lotes 1.Esta herramienta se utiliza únicamente para pruebas de seguridad; no me hago responsable de ningún ataque ilegal. 2.La herramienta se utiliza únicamente para pruebas de seguridad, y no soy responsable de ningún ataque ilegal...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference:...

Vite-CVE-2025-30208-Scanner

An automated tool for detecting Vite CVE-2025-30208 vulnerability, supporting batch scanning and result saving. Features ✅ Colored terminal output ✅ Batch target scanning file import supported ✅ Multi-threaded concurrent detection adjustable thread count ✅ Automatic saving of vulnerability result...

CVE-2022-22965

CVE-2022-22965 Poc&Exp, supports batch scanning Usage root@kitploit: -a string Reverse listening address -b Whether to display banner default true -c string Command default "ls" -p int Reverse listening port -poc Whether to only perform POC scan, default scan only POC default true -r Whether to...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp last 2018-8-9 Batch scanning script for DVR based on CVE-2018-9995 vulnerability Original exploit script for CVE-2018-9995 Original code Environmental preparation python3, ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install...

CVE-2020-14883

CVE-2020-14883 Weblogic 身份认证绕过漏洞批量检测脚本 使用方法： Python CVE-2020-14883-Multiple.py ip.txt port 存在漏洞的地址会输出在Vul.txt中...

CVE-2022-21371

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram A...

CVE-2020-0796-Batch-scanning

CVE-2020-0796 Batch scanning Since other scanning tools have a high false positive rate for CVE-2020-0796 verification, and Qi'anxin's tool cannot batch specify IPs. So I casually wrote this, place IPs in a txt file, use Qi'anxin scanning tool with multi-threaded scanning, but the CPU usage is...

CVE-2021-26084

CVE-2021-26084 Confluence Remote Code Execution RCE Code By:Junsheng @ Orange Cybersecurity Laboratory Orange Cybersecurity Laboratory https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online...

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

CVE-2025-55182

CVE-2025-55182 Next.js RCE 利用工具 🚀 这是一个针对 Next.js React Server Components CVE-2025-55182 远程代码执行 RCE 漏洞的自动化概念验证 PoC 工具。 该工具集成了 交互式 Shell 、智能协议识别 以及 多线程批量扫描 功能，专为安全研究人员和渗透测试人员设计，旨在快速验证和利用该漏洞。 ⚠️ 免责声明 ：本工具仅供网络安全教育和已获得授权的安全测试使用。严禁将其用于任何未授权的攻击行为。使用者需自行承担因使用本工具而产生的所有法律责任。 ✨ 核心功能 交互式 Shell 模式...