CVE-2024-40725

HTTP Request Smuggling Detection Tool This repository contains a Python-based tool to detect HTTP Request Smuggling vulnerabilities, specifically targeting CVE-2024-40725. The tool attempts to exploit this vulnerability in Apache HTTP Server by sending crafted HTTP requests and analyzing the...

CVE-2024-6387

CVE-2024-6387 Vulnerability Detection Program 1. Principle Obtain banner information via SSH connection, determine the version based on the banner information, and thereby confirm whether the vulnerability exists. 2. Highlights Colorful output Adjustable threads Progress bar display...

CVE-2024-24919-nuclei-templater

Just Nuclei template for CVE-2024-24919...

hollows_hunter

hollowshunter Hollows Hunter 是一款基于 PE-sieve 被动内存扫描器的命令行应用程序。它能够识别并转储多种潜在恶意植入物（替换/植入的 PE、shellcode、钩子、内存补丁）。虽然 PE-sieve 只能通过 PID 选择进程，但 Hollows Hunter 允许通过多种条件进行选择，例如： PID 列表 名称列表 创建时间（相对于 Hollows Hunter 执行时间） 如果未指定特定目标，它将扫描所有可用进程。 Hollows Hunter 还支持持续内存扫描，可通过 /loop 参数实现，或作为 ETW 监听器运行：在 /etw 模式下（仅...

Anti-Sandbox

Description Detecting AnyRun sandbox, and more is coming out in the future. AnyRun detection Demo https://github.com/user-attachments/assets/45533630-3c64-457a-80d0-a0f12ae84b98...

roca

ROCA检测工具 该工具与ACM CCS 2017会议论文第124号《Coppersmith攻击归来：广泛使用的RSA模数的实际分解》相关。 它使您能够测试公共RSA密钥是否存在所述的漏洞。 2017年11月4日更新 ：支持Python 2.7、3.4+。 2017年10月30日更新 ：攻击的论文已上线，ACM版本。 2017年10月30日更新 ：离散对数检测器现已在Python中实现并作为默认检测方法。它检测分解算法所利用的素数中的结构。 目前该工具支持以下密钥格式： X509证书，DER编码，每文件一个，.der，.crt X509证书，PEM编码，每文件多个，.pem...

Detection-for-CVE-2017-2793

Detection-for-CVE-2017-2793...

cve-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run: python3 cve-2020-7799.py Note: It is prohibited to use any resources of this project for illegal testing!...

CVE-2021-44228

CVE-2021-44228 Herramienta de reconocimiento masivo para CVE-2021-44228 Necesita corregir la librería Crypto para que funcione con Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py reemplazar línea 77 : t = time.clock con : t = time.perfcounter Cómo usar:...

vbulletin5-rce

vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...

find-log4j

find-log4j Find log4j for CVE-2021-44228 on some places Log4Shell...

DLLHijackHunter

DLLHijackHunter By ProjectMerai Automated DLL Hijacking Discovery, Validation, and Confirmation Turning local misconfigurations into weaponized, confirmed attack paths. Overview DLLHijackHunter is an automated Windows DLL hijacking detection tool that goes beyond static analysis. It discovers,...

CVE-2026-41089-Detector

CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...

ShiroScan

ShiroScan Shiro=1.2.4 deserialization, one-click detection tool root@kitploit: 改动内容：1.新增4个利用链模块CommonsCollections7-10，预计增加成功率30%，已打包成新ysoserial的jar包，请勿更换 改动内容：2.增加多线程，虽模块增加但速度却提高300% root@kitploit: 集成21个key进行fuzz If it helps, please give a star. Corresponding blog article:...

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...

Log4J_checker

Log4Jchecker Log4J checker for Apache CVE-2021-44228 log4j-checker.sh is a bash script that merges several checks...

ClipGuard

ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute — specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...

ketshash

Ketshash 一个基于事件查看器日志检测可疑特权NTLM连接（尤其是Pass-The-Hash攻击）的小工具。 该工具是"Pass-The-Hash检测"研究的一部分——更多关于"Pass-The-Hash检测"的详细信息请查看博客文章： https://www.cyberark.com/threat-research-blog/detecting-pass-the-hash-with-windows-event-viewer 完整研究可在白皮书中找到：...

log4shell-tools

log4shell.tools log4shell.tools es una herramienta que te permite ejecutar una prueba para comprobar si alguna de tus aplicaciones está afectada por las vulnerabilidades recientes en log4j: CVE-2021-44228 y CVE-2021-45046. Este es el código que ejecuta https://log4shell.alexbakker.me. Si quieres...

Linux-Kernel-Vulnerabilities-CVE-2026-23111

Linux Environment Audit Tool: CVE-2026-23111 This is a lightweight terminal-based script to find out if you are vulnerable to this attack or not. As I have heard at least one of my friends on Discord who uses Zorin OS happened to encounter this type of attack. As for now, security patches is not...