exchange-scanner

Microsoft Exchange Server 扫描器 描述 该工具扫描目标主机上多个常见的公开服务，以检测 Microsoft Exchange Server，并尽可能对其软件版本进行指纹识别。 为此，它使用以下技术： 通过响应头、登录页面内容和 favicon 哈希，对 Outlook Web Access OWA 进行指纹识别 通过 XML 响应，对 Exchange 控制面板 ECP 导出工具进行指纹识别 通过响应头对 Autodiscover 端点进行指纹识别 通过服务横幅，对常见端口上的 SMTP、IMAP 和 POP3 服务进行服务指纹识别 检测到的内部版本号会与从...

ExchangeFinder

ExchangeFinder ExchangeFinderは、与えられたドメインに対して、Microsoft Exchangeの上位共通DNS名に基づいてMicrosoft Exchangeインスタンスを見つけようとする、シンプルでオープンソースのツールです。 ExchangeFinderは、Microsoft Exchange 4.0 から Microsoft Exchange Server 2019 までのMicrosoft Exchangeの正確なバージョンを特定できます。 仕組み...

CMSsc4n

CMSsc4n ドメインがCMSを持っているかどうかを識別し、そのバージョンを特定するツールです。 現在、CMSsc4nがサポートしているCMSはWordPress、Moodle、Joomla、Drupal、Prestashopです。 インストール GitHubリポジトリをクローンして、CMSsc4nの最新バージョンをダウンロードできます。 root@kitploit: git clone https://github.com/n4xh4ck5/CMSsc4n.git pipで依存関係をインストールします。 root@kitploit: pip install -r...

wp2shell-detect

wp2shell-detect Blackbox、非侵入式 检测器，针对 wp2shell —— 于 2026-07-17 披露的 WordPress 核心预认证 RCE 链： CVE-2026-63030 — REST 批量端点（/wp-json/batch/v1）中的路由混淆：子请求的路径未通过 wpparseurl 时，会落入验证数组但不在处理程序数组中，导致两者失步。 CVE-2026-60137 — WPQuery 的 authornotin 处理中的 SQL 注入，可通过上述路由混淆在预认证状态下触达。 串联后，匿名攻击者可伪造管理员账户并植入插件 WebShell ——...

litellm-sqli-scanner

LiteLLM SQL 注入扫描器 CVE-2026-42208 — LiteLLM 代理中的 SQL 注入 检测并验证 CVE-2026-42208：LiteLLM 代理数据库层中的 SQL 注入漏洞。 仅限授权安全测试使用。 功能 CVE-2026-42208 SQL 注入检测 LiteLLM 代理版本指纹识别 PoC 验证载荷 结构化 JSON / 文本输出 环境要求 Python 3.8+ 使用方法 root@kitploit: python litellmscanner.py --url http://target:4000 Scan a target python...

citrix-netscaler-triage

Citrix NetScaler 应急排查（Triage） 本仓库包含用于 Citrix NetScaler 设备的应急排查脚本： iocitrix.py —— 一个 Dissect 脚本，用于对 Citrix NetScaler 镜像/目标进行应急排查。 scan-citrix-netscaler-version.py —— 通过 HTTPs 扫描并识别 NetScaler 设备的版本。 scan-citrix-netscaler-version.py 您可以使用此脚本通过 HTTPs 扫描并确定 Citrix NetScaler 设备的版本。 它还会根据版本判断该 NetScaler...

Exploit for CVE-2026-64638

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...

Exploit for CVE-2026-64638

🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

CVE-2026-40908

WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file git.json.php at the web root executes git log -1 and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash enabling version fingerprinting against known CVEs,...

PrestaShop Version Hunter

psversionhunter.py fingerprints a PrestaShop installation by comparing the versions of its native modules against the module versions bundled with a known PrestaShop release tag. This is useful when a target does not expose the PrestaShop core version directly but still exposes native module...

WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php Exposes Developer Emails and Deployed Version

Summary The file git.json.php at the web root executes git log -1 and returns the full output as JSON to any unauthenticated user. This exposes the exact deployed commit hash enabling version fingerprinting against known CVEs, developer names and email addresses PII, and commit messages which may...

CVE-2022-23690

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further...

EUVD-2025-36362

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits. This information disclosure vulnerability originates from PHP’s...

EUVD-2022-28629

Malicious code in bioql PyPI...

CVE-2019-10667

An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths...

Security feature bypass

A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running on the switch. This allows an attacker to retrieve information which could be used to more precisely target the switch for further...

JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting

Security Advisory: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting Date: 14/06/05 URL: http://www.illegalaccess.org/java/jbosspath.php Problem: The default installation of JBoss reveals the path of the installation directory and allows...