rips-scanner

RIPS A static source code analyser for vulnerabilities in PHP scripts Requirements web server: Apache or Nginx recommended PHP: latest version recommended browser: Firefox recommended Installation 1. Download the latest release 2. Extract the files to your local web server's document root 3. Make...

PIGADVulnScanner

ADVulnScanner Detect common one-shot vulnerabilities in the domain, including: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare...

jsp-webshell-scanner

JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...

CVE-2025-55182-Waf

Next.js/React RSC Scanner & Exploit - RCE This tool is designed for security researchers and penetration testers to detect and exploit the CVE-2025-55182 vulnerability in Next.js/React RSC applications. It provides multiple scanning modes, exploitation features, and WAF bypass techniques. ✨...

PHP-CGI-RCE-Scanner

PHP CGI RCE CVE-2024-4577 Scanner Just a tool for educational purposes. No legal responsibility. Scanning CVE-2024-4577 vulnerability with a url list. Not only sending exploit, but also checking PHP version and whether php-cgi exists. Make it more informative to know why or why not exploit succes...

RscScan-cve-2025-55182

RscScan - Next.js Server Actions Vulnerability Scanner Professional cross-platform vulnerability scanner for Next.js Server Actions RCE Features • Installation • Usage • Video Demo • Screenshots 🇺🇸 English • 🇮🇷 فارسی • 🇨🇳 简体中文 • 🇷🇺 Русский • 🇩🇪 Deutsch ⚠️ LEGAL DISCLAIMER THIS TOOL IS FOR...

Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection

Lantronix PremierWave 2050 8.9.0.0R4 contains an OS command injection vulnerability. A specially-crafted HTTP request can lead to command in the Web Manager Wireless Network Scanner. An attacker can make an authenticated HTTP request to trigger this vulnerability. id: CVE-2021-21881 info: name:...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

next.js-scanner

next.js-scanner Detection scanner for CVE-2025-55182 React Server Component Remote Code Execution Vulnerability...

CVE-2025-55182-Scanner

CVE-2025-55182 Hybrid Security Scanner A professional, hybrid security scanner designed to bridge static analysis and dynamic exploitation capabilities for CVE-2025-55182. This tool serves both developers shift-left security and security professionals production testing. Features Static Analysis ...

CVE-2024-8856

CVE-2024-8856 This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below "1.22.22" as vulnerable and logs results to "vuln.txt". Simple and efficient, it helps security researchers and admins detect and addres...

Scan_GhostScript

ScanGhostScript Scan for GhostScript files affected to CVE-2023-36664 PowerShell is self elevating. You can run it directely via context menu...

crlfuzz

CRLFuzz Una herramienta rápida para escanear vulnerabilidades CRLF escrita en Go Recursos Instalación desde Binario desde Código Fuente desde GitHub Uso Uso Básico Banderas Objetivo URL Única URLs desde lista desde Stdin Método Datos Añadir Cabeceras Usar Proxy Concurrencia Silencio Verboso Versi...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner es un escáner de red para el exploit Eternal Blue CVE-2017-0144 y Eternal Romance tubería con nombre CVE-2017-0145 . Capturas de pantalla Versión 2.2 Nuevas implementaciones Verificación de vulnerabilidad Eternal Romance escan -er Resultados divididos de la bas...

hsecscan

hsecscan Un escáner de seguridad para cabeceras de respuesta HTTP. Requisitos Python 2.x Módulos de Python os.path argparse sqlite3 urlparse urllib2 urllib json ssl Instalación $ pip install hsecscan Uso $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POS...

gosec

gosec - Verificador de Seguridad de Go Inspecciona el código fuente en busca de problemas de seguridad escaneando el AST de Go y la representación de código SSA. Enlaces rápidos GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Características Regla...

dora

dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...

vuls

Vuls: Escáner de Vulnerabilidades Escáner de vulnerabilidades para Linux/FreeBSD, sin agente, escrito en Go. Twitter: @vulsen Resumen Para un administrador de sistemas, tener que realizar análisis de vulnerabilidades de seguridad y actualizaciones de software a diario puede ser una carga pesada...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

super-xray

Super Xray If this project has helped you, you can give it a Star to support the author Introduction xray is an excellent vulnerability scanning tool, but currently only has a command-line version, started via the config.yaml configuration file. In many cases it is not easy to get started with, a...