GHSA-9MQM-QCWF-5QHG CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources

Summary CredSweeper's deep scanner does not enforce recursivelimitsize as a hard limit. Several recursive scanners fully decompress or fully read attacker-controlled content before the remaining budget is validated, and AbstractScanner.recursivescan continues processing even when the residual...

CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources

Summary CredSweeper's deep scanner does not enforce recursivelimitsize as a hard limit. Several recursive scanners fully decompress or fully read attacker-controlled content before the remaining budget is validated, and AbstractScanner.recursivescan continues processing even when the residual...

FTP Fetch, Linux Command Shell, Bind TCP Random Port Inline

Fetch and execute an x64 payload from an FTP server. Listen for a connection in a random port and spawn a command shell. Use nmap to discover the open port: 'nmap -sS target -p-'. Module Options This module requires Metasploit: https://metasploit.com/download Current source:...

Exploit for Argument Injection in Gnu Inetutils

🔥 Abyssal CVE-2026-24061 Telnet Vulnerability Scanner & Exp...

patchtriage

PatchTriage !CIhttps://github.com/d01ki/patchtriage/actio...

Apache Struts Detection

Detects Struts2 action extensions and OGNL error fingerprints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Apache Struts2 framework indicators.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse...

Apache Solr CVE-2026-44825 detection

Detects Apache Solr instances in the CVE-2026-44825 affected version range 9.4.x through 9.10.x before 9.10.2, and 10.0.0 and reports whether admin endpoints require authentication. !/usr/bin/env python3 -- coding: utf-8 -- import re from kittysploit import from lib.protocols.http.httpclient impo...

Apache Solr Detection

Detects Solr admin and system info endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect exposed Apache Solr admin interfaces.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Apache Solr Detection",...

Okta Detection

Detects Okta SSO tenants via OIDC metadata and login UI markers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Okta identity cloud tenants.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import parsejsonresponse class...

SSL/TLS Cipher Suite Enumeration

Enumerate cipher suites accepted by a TLS endpoint and flag weak or deprecated protocol versions. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate accepted TLS cipher suites on a live service.""" from future import annotations import json import re from kittysploit import from...

MSSQL Info - Detection

Detects MSSQL via TDS prelogin and reports version and encryption hints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft SQL Server via TDS prelogin.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.mssql.detectors import...

Generic Upload Webshell Probe

Probe generic file upload surfaces multipart POST for unrestricted extension handling and verify a harmless PHP/ASP execution marker. !/usr/bin/env python3 -- coding: utf-8 -- """ Generic multipart upload → webshell probe non-WordPress. Tests common upload endpoints and parameter names with a...

SNMP Community Probe

Tests common SNMP v1/v2c communities and collects basic system information. !/usr/bin/env python3 -- coding: utf-8 -- """Probe SNMP communities and enumerate basic system information.""" from future import annotations import json from kittysploit import from lib.protocols.snmp.snmpclient import...

VLAN ID Scanner

Hop through 802.1Q VLAN IDs on a Layer-2 access port by sending tagged DHCP and ARP probes, optionally harvesting CDP native VLAN hints first. !/usr/bin/env python3 -- coding: utf-8 -- """Discover active VLAN IDs from an access port using tagged DHCP/ARP probes.""" from future import annotations...

AD CS Misconfiguration Scanner

Detects ESC-style AD CS template and enrollment service misconfigurations via LDAP. !/usr/bin/env python3 -- coding: utf-8 -- """Detect vulnerable AD CS certificate templates and enrollment services.""" from kittysploit import from lib.protocols.ldap.adclient import Adclient, LDAP3AVAILABLE from...

GPO Local Group Audit

Parse SYSVOL GPO files Groups.xml, GptTmpl.inf and detect trustees added to privileged local groups Administrators, RDP Users, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Audit privileged local group assignments configured via GPO on SYSVOL.""" from future import annotations import json fr...

GPO Privilege Rights Audit

Parse SYSVOL GptTmpl.inf User Rights Assignment and detect trustees with dangerous privileges SeDebug, SeImpersonate, SeBackup, etc.. !/usr/bin/env python3 -- coding: utf-8 -- """Audit dangerous User Rights Assignment configured via GPO on SYSVOL.""" from future import annotations import json fro...

PDF Phone-Home Full Suite

Generate the full KittySploit PDF phone-home suite 70 files with phone-home callbacks for upload-scanner and red-team validation. Covers URI actions, JavaScript, XFA, XXE, UNC/NTLM, and viewer-specific CVE PoCs. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.pdf import...

WinRM Authentication Enumeration

Probe WinRM /wsman and enumerate advertised authentication methods. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate WinRM authentication methods on ports 5985/5986.""" from future import annotations import json from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

GCP Cloud Run Detection

Detects Cloud Run hostnames and Google Frontend trace headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Google Cloud Run services.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class...