WhatWeb

WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...

Log4j-CVE-Detect

Log4J-CVE-Detect This repository contains a set of YARA rules for detecting versions of log4j which are vulnerable to CVE-2021-44228, CVE-2021-45046, and / or CVE-2021-45105 by looking for a number of features which appear in affected versions. This tool works recursively on binary files such as...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner This script scans an IP/range/CIDR and outputs the Microsoft Exchange Servers and Versions discovered. The specified IP/range/CIDR will be scanned with masscan on port tcp/443. After a successful scan it tries to HTTP GET "/owa/auth/logon.aspx" with curl to grab the Outlook...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Educational project developed in Python focusing on the analysis of the vulnerability CVE-2021-3156 Baron Samedit , a critical flaw in sudo that allowed local privilege escalation on Linux systems. 📌 Project Objective This project was created with the goal of...

checkmk-log4j-scanner

checkmk extension to check for log4j2 CVE-2021-44228 This Plugin wraps around logpresso/CVE-2021-44228-Scanner Apache License 2.0 How it works Run in 5 steps: 1. Find all .jar, .war, .ear, .aar files recursively. 2. Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from...

cve-2025-55182-checker

CVE-2025-55182 Checker A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by CVE-2025-55182. Features Recursively scans all package.json files in a project. Detects vulnerable versions of: react-server-dom- 19.0.0, 19.1.0, 19.1.1, 19.2.0 next...

WPintel

Features • Installation • Use • License • Download Video Demonstration Features Detect WordPress version Detect version vulnerabilities Enumerate Users Detect Themes Detect Plugins Find full path disclosure Check user registration status Installation Google chrome users can download WPintel from...

CVE-2024-6387

CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...

juumla

🦁 Juumla 🦁 Juumla Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files. ⚡ Installing / Getting started A quick guide on how to install and use Juumla. root@kitploit: 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2...

SCCMVersionGuesser

SCCMVersionGuesser 自动化的 SCCM 构建版本与补丁级别检测工具 依赖要求 requests 使用方法 root@kitploit: $ python3 SCCMVersionGuesser.py https://sccm.example.com 参考 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/ https://github.com/MicrosoftDocs/memdocs/tree/main/intune/configmgr/hotfix...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

vulscan

vulscan - Nmapを使用した脆弱性スキャン 概要 Vulscanは、nmapを脆弱性スキャナーに拡張するモジュールです。nmapオプション -sV はサービスごとのバージョン検出を有効にし、特定された製品に応じた潜在的な欠陥を特定するために使用されます。データはオフラインバージョンのVulDBで検索されます。 インストール 以下のNmapインストールのフォルダにファイルをインストールしてください： root@kitploit: Nmap\scripts\vulscan\ 以下のようにGitHubリポジトリをクローンします： root@kitploit: git clone...

CRSprober

CRSprober 描述 该工具可远程检测 OWASP Core Rule Set CRS 在 ModSecurity WAF 上使用的版本。它还能识别 CRS 配置的偏执级别（PL），从而在无需本地访问的情况下洞悉 WAF 的安全态势。 先决条件 Python 3 使用方法 python crsprober.py http://example.com 许可证 版权所有 c 2025 Jozef Sudolsky。保留所有权利。 “啤酒软件许可证”（修订版 42）： [email protected]...

cve2025-20265

cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...

cve-2024-6387-nuclei-template

CVE-2024-6387 Nuclei Template Nuclei template to detect CVE-2024-6387 regreSSHion by OpenSSH software version...

CVE-2022-3602

Detection for CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Detects when the HTTP Server header indicates that the version of OpenSSL is vulnerable to CVE-2022-3602 ie. v3.0.0 to v3.0.6 inclusive. Detects exploitation attempts in TLS v1.2. References:...

solrradar

Apache Solr 批量侦察与漏洞利用框架 Velocity 模板注入 → 远程代码执行 📑 目录 漏洞概述 受影响版本 功能特性 安装 使用方法 概念验证 技术深入解析 检测方法论 防御与缓解措施 免责声明 参考资源 🔴 漏洞概述 CVE-2026-44825 是 Apache Solr 中的一个严重级别漏洞，攻击者可通过 Velocity 模板注入实现未认证远程代码执行（RCE） 。 问题所在 Apache Solr 的 /select 端点接受一个 wt=velocity 参数，用于渲染用户提供的 Velocity 模板。当 Velocity Response Writer...

cve-2024-3094-detect

CVE-2024-3094-detect XZ Utils Vulnerability Check and Downgrade Script This script is designed to check the version of XZ Utils installed on your Linux system and downgrade it to a safe version if necessary. It also detects the Linux distribution and the package manager used. Features Checks the...