206 matches found
Detection-for-CVE-2017-2793
Detection-for-CVE-2017-2793...
cve-2020-7799
cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run: python3 cve-2020-7799.py Note: It is prohibited to use any resources of this project for illegal testing!...
CVE-2021-44228
CVE-2021-44228 Herramienta de reconocimiento masivo para CVE-2021-44228 Necesita corregir la librería Crypto para que funcione con Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py reemplazar línea 77 : t = time.clock con : t = time.perfcounter Cómo usar:...
vbulletin5-rce
Herramienta de detección de vulnerabilidades RCE para vbulletin5 0x00 Resumen En 201909, se reveló una vulnerabilidad RCE en vbulletion5 5.0.0-5.5.4 CVE-2019-16759. Utilizando el archivo ajax/render/widgetphp y el parámetro POST widgetConfigcode, se puede ejecutar código de forma remota...
find-log4j
find-log4j Find log4j for CVE-2021-44228 on some places Log4Shell...
DLLHijackHunter
DLLHijackHunter By ProjectMerai Automated DLL Hijacking Discovery, Validation, and Confirmation Turning local misconfigurations into weaponized, confirmed attack paths. Overview DLLHijackHunter is an automated Windows DLL hijacking detection tool that goes beyond static analysis. It discovers,...
CVE-2026-41089-Detector
CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...
ShiroScan
ShiroScan Shiro=1.2.4 deserialization, one-click detection tool root@kitploit: 改动内容：1.新增4个利用链模块CommonsCollections7-10，预计增加成功率30%，已打包成新ysoserial的jar包，请勿更换 改动内容：2.增加多线程，虽模块增加但速度却提高300% root@kitploit: 集成21个key进行fuzz If it helps, please give a star. Corresponding blog article:...
react2shell
React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...
Log4J_checker
Log4Jchecker Log4J checker for Apache CVE-2021-44228 log4j-checker.sh is a bash script that merges several checks...
ClipGuard
ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute — specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...
ketshash
Ketshash 一个基于事件查看器日志检测可疑特权NTLM连接（尤其是Pass-The-Hash攻击）的小工具。 该工具是"Pass-The-Hash检测"研究的一部分——更多关于"Pass-The-Hash检测"的详细信息请查看博客文章： https://www.cyberark.com/threat-research-blog/detecting-pass-the-hash-with-windows-event-viewer 完整研究可在白皮书中找到：...
log4shell-tools
log4shell.tools log4shell.tools es una herramienta que te permite ejecutar una prueba para comprobar si alguna de tus aplicaciones está afectada por las vulnerabilidades recientes en log4j: CVE-2021-44228 y CVE-2021-45046. Este es el código que ejecuta https://log4shell.alexbakker.me. Si quieres...
Linux-Kernel-Vulnerabilities-CVE-2026-23111
Linux Environment Audit Tool: CVE-2026-23111 This is a lightweight terminal-based script to find out if you are vulnerable to this attack or not. As I have heard at least one of my friends on Discord who uses Zorin OS happened to encounter this type of attack. As for now, security patches is not...
CVE-2021-37580
CVE-2021-37580 Support for single and batch verification of CVE-2021-37580 vulnerability Single URL detection: File batch verification:...
can-i-take-over-xyz
Disclaimer ⚠️ The authors of this document take no responsibility for correctness. This project is merely here to help guide security researchers towards determining whether something is vulnerable or not, but does not guarantee accuracy. This project heavily relies on contributions from the...
xsshunter
DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...
redis-checker
redis-checker Detecta servidores Redis expuestos root@kitploit: usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT...