206 matches found
CVE-2024-3094-check
CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use root@kitploit: curl -fsSL...
Detection-for-CVE-2017-2793
Detection-for-CVE-2017-2793...
halogen
Halogen は、悪意のあるドキュメントに埋め込まれた画像ファイルに基づいて YARA ルールの作成を自動化するツールです。これは、サイバーセキュリティの専門家が悪意のある脅威に対する検出ルールを作成する際や、対応者が特定の脅威を識別する際に役立ちます。現在、Halogen は JPG および PNG ファイルに基づくルールを作成できます。 Halogen ヘルプ root@kitploit: python3 halogen.py -h usage: halogen.py -h -f FILE -d DIR -n NAME --png-idat --jpg-sos...
cve-2019-2725
Run with python3 1. Place detection targets in the ip.txt file, format: 192.168.1.18:7001 2. Run the script directly; results with vulnerabilities are saved in the ok.txt file...
mongobleedburp
MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...
mimikatz-detector-condrv
Mimikatz Detector - ConDrv + ConsoleMonitor This project is based on the research that was done for mimikatz detection technique phase 2. It has multiple projects in the solution: ConsoleMonitor - A GUI application in C to sniff console related traffic input output through ConDrv...
laravel-ignition-Rxss
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install laravel-ignition-rxss Run bellow command to check laravel-ignition-rxss -h Configurations 2. We integrated with...
CVE-2026-41089-Detector
CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...
react2shell
React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...
CVE-2025-6440
CVE-2025-6440 nuclei tamplate to CVE-2025-6440 BETA VERSION, will be update...
CVE-2026-41940
CVE-2026-41940 | cPanel/WHM 身份验证绕过检测 ╔════════════════════════════════════════════════════════════════════════════╗ ║ cPanel/WHM 身份验证绕过 - 检测工件生成器 ║ ╚════════════════════════════════════════════════════════════════════════════╝ 📌 描述 此检测工件生成器用于验证 cPanel/WHM 是否存在最近的身份验证绕过漏洞。 🚀 检测实战 针对易受攻击的实例进行测试：...
CVE-2021-45232
Apache APISIX Dashboard 接口未授权访问 说明 该工具集成了fofa和poc一键检测功能、实现了一键从fofa爬取和一键检测（边爬边测） 使用方法 使用版本Version：python3 测试前要先更改自己的fofatoken值与更改变量fofa语法自定义测试范围 image-20220108153856024 python3 CVE-2021-45232.py 3 1 image-20220108153151252 image-20220108153428170 结果会保存在resualt.txt中...
CVE-2025-55315-Scanner-Monitor
Escáner de Vulnerabilidad CVE-2025-55315 y Proxy TLS Este repositorio contiene herramientas para detectar y monitorear aplicaciones ASP.NET Core vulnerables a CVE-2025-55315, que implica contrabando de solicitudes HTTP HTTP request smuggling debido a encabezados HTTP conflictivos. Herramientas...
CVE-2022-33679_Checker
CVE-2022-33679 Checker Lightweight checker that tests whether a set of Active Directory credentials is exposed to CVE-2022-33679 Kerberos AS-REP roast without pre-authentication. The code is derived from Bdenneu/CVE-2022-33679 and keeps only the detection path—it never attempts exploitation. It...
CVE-2023-29923-Scan
CVE-2023-29923-Scan PowerJob =4.3.2 Unauthorized Access Vulnerability Detection Tool CVE-2023-29922...
CVE-2023-28432
...
CVE-2022-1388
CVE-2022-1388 F5 BigIP exploit CVE-2022-1388 scanner...
CVE-2022-35914
CVE-2022-35914 Batch Detection Tool Create a target.txt file, import the URLs to be detected, and then start batch detection. If an error occurs, please disable the proxy...