netattack2

NETATTACK2 NETATTACK2 is a script written in python that can scan and attack networks. It is GUI-based which makes it easy to understand. What can I do with it? SCANNING Scan your network for active hosts, their operating system, open ports and way more. Scan for Access-Points and figure out...

RTSPbrute

RTSPBrute Inspired by Cameradar Features Find accessible RTSP streams on any target Brute-force stream routes Brute-force credentials Make screenshots on accessible streams Generate user-friendly report of the results: .txt file with each found stream on new line .html file with screenshot of eac...

vsaudit

vsaudit This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start...

NetAss2

NetAss2 Easier network scanning with NetAss2 Network Assessment Assistance Framework. Make it easy for Pentester to do penetration testing on network. Dependencies nmap tool zmap tool Installation git clone https://github.com/zerobyte-id/NetAss2.git cd NetAss2 sudo chmod +x install.bash sudo...

Port-enumeration

Port enumeration Have you ever faced with the lack of possibility of using NMap? For instance if you have reverse shell as an unprivileged user and there are no useful tools preinstalled? This is a small script which will help you to scan a network if you have nothing. Usage example: chmod +x...

EternalBlue-Vulnerability-Scanner

EternalBlue Scanner A Python tool for scanning SMB-enabled devices for the EternalBlue vulnerability CVE-2017-0144. This script checks whether devices in a network are vulnerable to the EternalBlue exploit by testing SMB connections. ⚡ Features ✅ Scans a list of IP addresses for SMB vulnerability...

wannafind

wannafind Simple script using nmap to detect CVE-2017-0143 MS17-010 Windows SMB and CVE-2017-7494 SAMBA in your network Usage: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...

log4j-quick-scan

log4j-quick-scan Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library. There are far better and advanced tools for security audit, but many of them requires commercial penetration software or external, 3rd party service or software. This script is...

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

CVE-2021-41277_SSRF

CVE-2021-41277SSRF CVE-2021-41277 can be extended to an SSRF Description Metabase is an open source data analytics platform. Metabase versions 0.40.5 were affected by CVE-2021-41277 which led to local file inclusion according to the CVE description. While analyzing the finding described in Metaba...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

CVE-2022-36663-PoC

CVE-2022-36663-PoC Internal network scanner through Gluu IAM blind ssrf Gluu IAM is vulnerable to blind SSRF which can be exploited to scan the internal network for open ports depending on response times. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 To check if the target is vulnerable, add...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Weblogic SearchPublicRegistries SSRFCVE-2014-4210 Exploit Script based on Python3 Usage optional arguments: -h, --help show this help message and exit -u U Single Target URL -uf UF Read URLs from file -p P Only scan specified ports -sn SN Only scan specified subnets -sf...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

Scanning

Here's the normal Markdown format without columns, just like your LianYu code: markdown Vulnerability Analysis - LAB W7 Description | ---|--- Course Code| IKB21004 & IKB21403 Task| File Analysis - Scanning Result Difficulty| Intermediate Category| Vulnerability Assessment, Network Analysis...

PyLadon

Ladon Scanner For Python PyLadon Currently, the Python version has fewer features and cannot match Ladon.exe in performance or speed on either Windows or Linux systems. Its only advantage is cross-platform support; related features will be added later. The obvious drawback is that the packaged...

pd-agent

ProjectDiscovery Cloud Platform — Agent What it does • Quick Start • Install • Configuration • Scaling What it does pd-agent lets you scan your own internal networks from the ProjectDiscovery Cloud Platform. Install the agent on a machine inside the network you want to scan — a VM, a server, a...

CVE-2017-15944

CVE-2017-15944 CVE-2017-15944 Module for Router Scan Project How To Use prepare pip3 install ipcalc,requests usage python3 scanner.py Copyright some part of this repository is inspired by paper.seebug.org with some changes for APIs of Router Scan Project...

Scanner-CVE-2019-0708

Scanner-CVE-2019-0708 This Scanner BlueKeep CVE-2019-0708 Install and Running git clone https://github.com/JSec1337/Scanner-CVE-2019-0708 cd Scanner-CVE-2019-0708 pip3 install pyasn1 pyasn1modules cryptography==2.7 chmod +x scanbluekeep.py ./scanbluekeep.py 192.168.1.7 Or ./scanbluekeep.py...

fyp

A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...