React2Shell

React2Shell - CVE-2025-55182 & CVE-2025-66478 Autor: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt Versión: 2.0.0 Ofuscado Fecha: 2025-12-07 🚀 Inicio Rápido Ejecutar el Escáner root@kitploit: python react2shell.py ¡Eso es todo! El escáner: 1. Verificará su integridad 2. Descomprimirá el código...

CVE-2021-2109

CVE-2021-2109 Escáner básico de CVE-2021-2109 Úsalo con root@kitploit: python3 cve-2021-2109.py URL...

log4jcheck

Log4j CVE-2021-44228 检测器 多线程检测 URL 列表，支持 POST 和 GET 请求并附带参数。 大量灵感来源于 NortwaveSecurity 版本。 设置 待检测的 URL 待检测的 URL 列表应采用以下格式（csv）： root@kitploit: description,URL,method,parameters production,example.com/login,POST,"username,password" staging,example.com/search,GET,"q" development,example.com/,GETNP,"...

CVE-2024-0235

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esta herramienta Instalación mediante pip root@kitploit: pip install CVE-2024-0235 Ejecuta el siguiente comando para verificar CVE-2024-0235 -h...

CVE-2024-24919

CVE-2024-24919 快速简单的脚本，以包含多个URL的文件作为输入，用于检测CHECKPOINT中的CVE-2024-24919漏洞。 3 示例输入文件： 演示 致谢 Gustavo Segundo - ByteNull%00...

CVE-2009-0347

徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 操作指南（如果你连这个都搞不定，那你真不应该使用这个工具） 通过 pip 安装 root@kitploit: pip install CVE-2009-0347 运行以下命令验证安装 CVE-2009-0347 -h 配置 2. 我们集成了 Telegram API，以便在检测到漏洞时立即发送通知。 Telegram 通知 root@kitploit: CVE-2009-0347 --chatid 打开 Telegram 并搜索 @CappricioSecuritiesToolsbot，然后点击开始 用法 3...

log4j-urlscanner

log4j-detect 简单的 Python 3 脚本，用于检测一组 URL 的“Log4j”Java 库漏洞（CVE-2021-44228），支持多线程 脚本“log4j-detect.py”使用 Python 3 开发，用于检测指定 URL 列表是否受 CVE-2021-44228 漏洞影响。 其工作流程如下：通过线程（提高性能）向列表中的每个 URL 发送 GET 请求。该 GET 请求包含一个载荷，成功时会将 DNS 请求发送至 Burp Collaborator /...

CVE-2024-0195

Insignias Licencia MIT Instalación 1. Instale Python3 y pip Instrucciones aquí Si no puede resolver esto, realmente no debería estar usando esto Instalar via pip root@kitploit: pip install CVE-2024-0195 Ejecute el siguiente comando para verificar CVE-2024-0195 -h Configuraciones 2. Integramos con...

EUVD-2024-29115

Malicious code in bioql PyPI...

CVE-2024-31218

Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in versions 0.9.0 and earlier are subject to Missing Authentication for Critical Function vulnerability. This vulnerability allows an unauthenticated attacker to send a HTTP reques...

CVE-2024-31218 Missing Authentication for Critical Function in Webhood backend

Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in versions 0.9.0 and earlier are subject to Missing Authentication for Critical Function vulnerability. This vulnerability allows an unauthenticated attacker to send a HTTP reques...

CVE-2024-31218

CVE-2024-31218 affects Webhood backend up to version 0.9.0, where the Pocketbase admin API can be invoked unauthenticated to create an admin account when none exists. The issue arises from Missing Authentication for a Critical Function and makes deployments vulnerable unless an admin account alre...

CVE-2024-31218 Missing Authentication for Critical Function in Webhood backend

Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in versions 0.9.0 and earlier are subject to Missing Authentication for Critical Function vulnerability. This vulnerability allows an unauthenticated attacker to send a HTTP reques...

CVE-2024-31218 Missing Authentication for Critical Function in Webhood backend

Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in versions 0.9.0 and earlier are subject to Missing Authentication for Critical Function vulnerability. This vulnerability allows an unauthenticated attacker to send a HTTP reques...