cve-2025-32711

Herramienta de Detección de CVE-2025-32711 EchoLeak 🔐 Descripción general CVE-2025-32711, apodado "EchoLeak", es una vulnerabilidad crítica de cero clics en Microsoft 365 Copilot que permitía a los atacantes exfiltrar datos organizativos sensibles sin ninguna interacción del usuario. Este...

Minio-CVE-2023-28432

Minio-CVE-2023-28432 Detection tool for Minio-CVE-2023-28432 information leak. For learning and authorized testing only. Personal analysishttps://lhxhl.github.io/2023/04/03/minio2023/ Usage Requires golang environment root@kitploit: go build main.go ./main -h // help ./main -u url // single URL...

detectar_cve-2024-3094

Detectarcve-2024-3094...

Detect-CVE-2017-8464

Detect-CVE-2017-8464...

SiteCore-RCE-Detection

SiteCore-RCE-Detection For detection of sitecore RCE - CVE-2021-42237 Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 Relies on sitecore version detection and response when a request is made to vulnerale Report.ashx via Get and Post. The script takes a file containing list of urls in...

minion-ticket-bleed-plugin

Minion Ticketbleed Plugin This is a plugin for Minion that run a check for Ticketbleed CVE-2016-9244 vulnerability on F5 TLS layer. The test can either runs as a go script or an linux binary. The script is improved from https://filippo.io/Ticketbleed/ Installation Clone the project with git clone...

CVE-2024-36416

CVE-2024-36416 Tool for validating CVE-2024-36416 Usage root@kitploit: pip3 install -r requirements.txt python3 sukuna.py --help python3 sukuna.py --url http://./ --validate --payload-test Server-Side Log File Check Verify the server-side file, if the log file \service\example\proxy.log is =25MB,...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

shocknaww

shocknaww Simple script to check for CVE-2014-6271 Example Usage root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo Sample vulnerable environment From the parent directory, run the following. root@kitploit: python -m CGIHTTPServer Now use shocknaww against your localhost test server...

SpEL

SpEL Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）批量检测工具 使用方法 文件中逐行写入需要检测的URL，参数-TF 指定文件 -t 并发数量 执行效果 玉兔安全致力于web安全、红蓝对抗、内网渗透、免杀技巧、安全工具系列干货分享。更多安全工具分享，欢迎关注玉兔安全公众号！...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520 and CVE-2026-10523 An Ivanti Sentry Authentication Bypass and Remote Code Execution Detection Artifact Generator. See our blog post for technical details. Detection in Action root@kitploit: $ python3 watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523.py --url...

acropadetect

Acropadetect Web tool for detecting Acropalypse CVE-2023-21036...

chanleakcheck

chanleakcheck This a tool to check if your lnd node was targeted by CVE-2019-12999, which was recently fully disclosed on. The tool will check if your node accepted an invalid channel, as well as attempt to quantify the total amount of lost coins, if any. Note that this tool is only for lnd,...

wp2shell-scanner

wp2shell-scanner by@bahartanir katherinepierce Fork of ZephrFish/wp2shell-scanner with additional improvements. Research by Adam Kues Assetnote and Mustafa Can İPEKÇİ nukedx. Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are select...

strutser

strutser Este programa verifica la CVE-2017-5638. Uso root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP...

CVE-2025-55182

CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. 🚀 Installation root@kitploit: wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chm...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

Vm4J

Vm4J 用于检测 VMware 产品 log4j 漏洞的工具。 工作原理 首先启动一个 JNDIExploit 服务器。 启动本工具并将配置设置为正确的选项。 发送 payload。 截图 支持 VMware HCX VMware vCenter VMware Workspace One（即将添加） VMware NSX VMware Horizon VMware vRealize Operations Manager 注意 1. 本项目使用 Visual Studio 2022 和 .NET Framework 4.5。 2. 调试模式下，本工具将代理设置为...