GitLab-CVE-2021-22205-scanner

GitLab-CVE-2021-22205-scanner Usage $ python3 GitLab-revshell.py -u https://gitlab.target.com -l AttackerIP -p AttackerPort Credit https://hackerone.com/reports/1154542 Referred code snippet from here: https://github.com/CsEnox/Gitlab-Exiftool-RCE/blob/main/exploit.py Disclaimer: The script is fo...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

NetProbe

NetProbe: Network Probe NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a...

abap-code-scanner

OWASP ABAP Code Scanner Static Application Security Testing SAST for SAP ABAP. A free, open-source CLI for finding security vulnerabilities in custom ABAP code - offline and in CI. Editions Edition| What it is| Where ---|---|--- Open-source CLI free, MIT| Scan exported ABAP source locally or in C...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 Scan By 7kbstorm...

WSPIH

WSPIH Website Personal Sensitive Information File Scanner Disclaimer: This project is for learning, testing, and communication purposes only. Do not use for illegal purposes. If the target is a school website, please submit the vulnerability to the Education Industry Vulnerability Reporting...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Scanner and Exploit Magento The Scanner explores the SQLi Vulnerability 1.9.1.0 CE of Magento. The vulnerability was fixed in Patch SUPEE-5344 , however, the scanner is used to locate and test systems that did not apply the security patch. LetMeFuckIt was written in...

CVE-2024-4956-Bulk-Scanner

README.md CVE-2024-4956 Bulk Scanner Disclaimer This tool is intended only for educational purposes and for testing in corporate environments. https://twitter.com/nav1n0x/ and https://github.com/ifconfig-me take no responsibility for the misuse of this code. Use it at your own risk. Do not attack...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

hackguard

hackguard FAST WEB APPLICATION VULNERABILITY SCANNER Requirements: 1. Make sure python3 is installed in windows Or in Linux 2. For Windows: python -m pip install -r requirements.txt 3. For Linux: python3 -m pip install -r requirements.txt Installation: 1. For Linux Users: a git clone...

log4shell_sentinel

Log4Shell Sentinel - A Smart CVE-2021-44228 Scanner Introduction While there have some excellent tools released to help organizations scan their environments for applications vulnerable to the critical Log4J / CVE-2021-44228 vulnerability, I felt that: none of the tools I ran into were made for...

CVE-2020-8193-Citrix-Scanner

CVE-2020-8193-Citrix-Scanner Scanning for CVE-2020-8193 - Auth Bypass check https://vulners.com/cve/CVE-2020-8193 Supporting Documents: https://research.nccgroup.com/2020/07/10/rift-citrix-adc-vulnerabilities-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-intelligence/...

nGixshell

nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a proof-of-concept for CVE-2026-42945 CVSS 3.1 8.1 HIGH per F5/NVD — a heap buffer overflow in ngxhttprewritemodule — and a scanner covering 64 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web...

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

browser-xpi-malware-scanner

XPI Analyzer — Firefox Extension Security Scanner A command-line tool that analyzes Firefox extension files .xpi for signs of malware, obfuscation, hidden payloads, steganography, and other techniques used to sneak malicious code past extension review teams. What It Does extension-scanner.py tear...

CVE-2025-53770

CVE-2025-53770 This is a multiple site scanner for CVE-2025-53770 Unauthenticated RCE Vulnerability. Other scanners/PoCs:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE Impact: Unauthenticated attackers can achieve remote...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

vulners-scanner

vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...

signature-base

Signature-Base Signature-Base is the YARA signature and IOC database for our scanners LOKI and THOR Lite Focus of Signature-Base 1. High quality YARA rules and IOCs with minimal false positives 2. Clear structure 3. Consistent rule format Directory Structure iocs - Simple IOC files CSV yara - YAR...