react2shell-honeypot

React2Shell honeypot Mein Versuch, einen Honeypot für die React2Shell-Schwachstelle zu erstellen Alle Angriffspayloads werden in den logs/ip-Ordner geschrieben Usage root@kitploit: go build Optionally: export GINMODE=release react2shell-honeypot -addr localhost:8080 Getestet mit Scannern:...

CVE-2026-41940

CVE-2026-41940 ✅ Analisi dello script cosa fa lo scanner e come ✅ Spiegazione tecnica della causa principale il diff CRLF/Session.pm ✅ Prevenzione — comandi di patch, lezioni di codifica sicura ✅ Mitigazione — regole firewall, configurazione WAF, hardening ✅ Ricerca IOC — rilevare se sei già stat...

NginxHunter

NginxHunter Descrição O NginxHunter é uma ferramenta abrangente projetada para analisar logs de acesso do Nginx em busca de vulnerabilidades de segurança e atividades suspeitas. Ele detecta tentativas de injeção SQL, ferramentas de scanner, acessos a caminhos sensíveis, tentativas de exploração,...

veilgate

VeilGate VeilGate ist ein Open-Source-Deception-Proxy für Teams, die die Kosten automatischer Sicherheitsabfragen erhöhen möchten, ohne zerbrechliche Blockierungsregeln vor echte Benutzer zu setzen. Er sitzt vor einer Webanwendung, bewertet jede Anfrage und wählt eines von drei Ergebnissen aus:...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automatisieren Sie den Prozess der Analyse von Webserver-Logs mit dem Python Web Log Analyzer. Dieses leistungsstarke Tool wurde entwickelt, um die Sicherheit zu erhöhen, indem es verschiedene Arten von Cyberangriffen in Ihren Server-Logs erkennt und identifiziert. Bleiben S...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

Linux Distros Unpatched Vulnerability : CVE-2026-68089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't...

Adobe Experience Manager (AEM) CRX Package Manager Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM CRX Package Manager panel on a web application. The CRX Package Manager is a tool used to manage packages in AEM, allowing users to install, uninstall, and manage content packages. No source data...

Dell Enterprise SONiC OS Detection

Binary data dellsonicosinstalled.nbin...

MCP Server Tools Detected

This is an informational notice that the scanner was able to detect the exposition of tools on the target Model Context Protocol MCP server. No source data...

Linux Distros Unpatched Vulnerability : CVE-2025-38061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pktgen: fix access outside of user given buffer in pktgenthreadwrite Honour the user given buffer size for the strnlen calls otherwise strnlen will access...

Microsoft Exchange Admin Center Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Exchange Admin Center instance on the target application. No source data...

Voiceflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Voiceflow chatbot on the target application. Voiceflow is a solution to build & deploy AI customer experiences. This detection is included in the AI and LLM category. No source data...

MCP Manifest Detected

This is an informational notice that the scanner was able to detect an MCP Model Context Procol manifest on the target server. No source data...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

Linux Distros Unpatched Vulnerability : CVE-2016-10196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2011-4077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the xfsreadlink function in fs/xfs/xfsvnodeops.c in XFS in the Linux kernel 2.6, when CONFIGXFSDEBUG is disabled, allows local users to cause...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

SonarQube Public Projects Detected

A SonarQube Public Projects response have been detected on the target web application. These response may contain sensitive information which could assist an attack to conduct further attacks. No source data...

H2OGPT Detection

A H2OGPT Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208135; scriptversion"1.6";...