t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing git clone...

PCWT

PCWT A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Summary Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB,...

ccs-eval

Evaluates hosts for CVE-2014-0224 vulnerability https://vulners.com/cve/CVE-2014-0224 Usage: ccs-eval.py list-of-hosts.txt -Takes in a list of hosts, line seperated. Checks the host for common SSL ports using nmap. Peforms PoC injection test supplied by RedHat fake-client-early-ccs.pl. Writes...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

PortWitness

PortWitness v1.1 Written in Python2 This version of PortWitness has been developed in python2 in which modules like os,subprocess and sys etc have been used.The entire code is based on the concept of socket programming.Using Sockets we establish a connection with a web application to find out if...

nmap-printer-nse-scripts

This repository does not have a README...

CVE-2022-24706

CVE-2022-24706 Apache CouchDB 3.2.1 - Remote Code Execution RCE Checker Usage: nmap -p 4369 --script CVE-2022-24706.nse --script-args cookie=monster,timeout=5000...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passwd from remote system using Solarwinds CVE-2023-23333 vulnerability Save the script into a file named solar-CVE-2023-23333.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script...

NSE_CVE-2025-55182

NSECVE-2025-55182 Nmap NSE script for scanning React2Shell CVE-2025-55182 Disclaimer The following code is provided for educational and research purposes only. Any use of this script is solely at the discretion and responsibility of the user. This scanner may produce false positives or inconclusi...

Nmap Port Scanner 7.993

Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols UDP, TCP, ICMP, etc...

PT-2026-126429

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass categories like exploit, dos, brute, or intrusive to nmap --script...

nmap-CVE-2023-35078-Exploit

nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35078 - Mobile Iron Core Save the script into a file named nmap-CVE-2023-35078-Exploit.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script nmap-CVE-2023-35078-Exploit.nse...

Vulnerability-assessment

Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...

recon

O.G. AUTO-RECON Features The purpose of O.G. Auto-Recon is to automate the initial information gathering phase and then enumerate based off those results as much as possible. This tool is intended for CTF's and can be fairly noisy. Not the most stealth conscious tool... Command syntax can be easi...

trigmap

About Trigmap is a bash wrapper for Nmap. You can use it to easily run nmap scans and, especially, to collect information into a well organized directory hierarchy. The use of Nmap makes the script portable easy to run not only on Kali Linux and very efficient thanks to the optimized Nmap...

project_BIT_nmap_script

Python program to detect vulnerability with CVE-2022-32073 in large networks This python program runs nmap on an address passed as an argument, by default it runs on all ports but port number can also be given as an argument. It runs nmap with custom created wolfsshversion.nse scripts which uses...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...