NginxHunter

NginxHunter 説明 NginxHunterは、Nginxのアクセスログを解析してセキュリティ脆弱性や不審なアクティビティを検出するための包括的なツールです。SQLインジェクションの試行、スキャナーツール、機密パスへのアクセス、悪用試行、Webシェルなども検出します。Nginxサーバーのセキュリティ強化を目指すシステム管理者やセキュリティ専門家に最適です。 使用方法 root権限で使用します root@kitploit: $ wget...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Python Web Log Analyzer を使用して、Webサーバーログの分析プロセスを自動化します。この強力なツールは、サーバーログ内のさまざまな種類のサイバー攻撃を識別および検出することで、セキュリティを強化するように設計されています。以下の機能を備え、潜在的な脅威に先手を打ちましょう。 目次 機能 将来の機能 インストール 使い方 貢献 ライセンス 機能 1. 攻撃検出:...

veilgate

VeilGate VeilGateは、チームが自動セキュリティプロービングのコストを引き上げつつ、実際のユーザーの前に脆弱なブロックルールを配置しないことを目指す、オープンソースの欺瞞プロキシです。 Webアプリケーションの前に配置され、各リクエストをスコアリングし、以下の3つの結果のいずれかを選択します。 Real : クリーンなトラフィックを上流のアプリに転送します。 Challenge : 疑わしいが曖昧なクライアントに、ブラウザのProof of Workを要求します。 Tarpit : 高信頼度のエージェントトラフィックを決定論的な偽アプリに誘導します。...

CVE-2026-41940

CVE-2026-41940 ✅ 脚本分析（扫描器的作用及工作原理） ✅ 根本原因技术解析（CRLF/Session.pm 差异） ✅ 防护措施——补丁命令、安全编码经验 ✅ 缓解方案——防火墙规则、WAF 配置、加固建议 ✅ IOC 追踪——检测是否已被攻击 ✅ VaPT 方法论——范围界定、侦察、报告框架、MITRE 映射 ✅ 风险评分、移动端导航、复制按钮、可折叠区块...

react2shell-honeypot

React2Shell 蜜罐 我为React2Shell漏洞尝试制作一个蜜罐 所有攻击载荷都会写入 logs/ip 文件夹 使用方法 root@kitploit: go build 可选：export GINMODE=release react2shell-honeypot -addr localhost:8080 已在以下扫描器上测试： assetnote/react2shell-scanner gensecaihq/react2shell-scanner hackersatyamrastogi/react2shell-ultimate...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer wi...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Dell Enterprise SONiC OS Detection

Binary data dellsonicosinstalled.nbin...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

Linux Distros Unpatched Vulnerability : CVE-2025-38061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pktgen: fix access outside of user given buffer in pktgenthreadwrite Honour the user given buffer size for the strnlen calls otherwise strnlen will access...

Microsoft Exchange Admin Center Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Exchange Admin Center instance on the target application. No source data...

Voiceflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Voiceflow chatbot on the target application. Voiceflow is a solution to build & deploy AI customer experiences. This detection is included in the AI and LLM category. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2011-4077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

SonarQube Public Projects Detected

A SonarQube Public Projects response have been detected on the target web application. These response may contain sensitive information which could assist an attack to conduct further attacks. No source data...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...