CVE-2025-55182-React2shell

CVE-2025-55182 - React2shell Un exploit Python 2.7 pour CVE-2025-55182 – une vulnérabilité critique de pollution de prototype / exécution de code à distance RCE dans les applications Next.js. Cet outil permet à la fois un shell interactif sur cible unique et un scan de masse de plusieurs hôtes av...

CVE-2023-25136

CVE-2023-25136 مسح واستغلال واسع النطاق لثغرة OpenSSH 9.1 تفاصيل الثغرة OpenSSH هو برنامج ينفذ بروتوكول SSH، يستخدم عادة للاتصال بأجهزة Linux أو Windows بطريقة آمنة لتنفيذ الإدارة عن بُعد. تؤثر الثغرة الأمنية CVE-2023-25136 التي تم تقديمها في OpenSSH 9.1 على عملية التحقق المسبق من الهوية في SSH. ...

tsusen

Tsusen 津波センサー هو مستشعر شبكة مستقل مصمم لجمع المعلومات من حركة المرور العادية القادمة من الخارج أي الإنترنت على أساس يومي مثل عمليات المسح الشامل، ماسحات الخدمات، إلخ. يجب مراقبة أي اضطرابات عن كثب لأنها يمكن أن تشكل قاعدة تنبؤ جيدة للأحداث القادمة. على سبيل المثال، استغلال ثغرة خدمة ويب مكتشفة...

ofbiz-poc

ofbiz-poc CVE-2020-9496 и CVE20209496 с использованием dnslog для массовой проверки уязвимости poc и exp OFBizCVE20209496.py и OFBizCVE202126295.py — проверка отдельных уязвимостей ofbizpoc.py — массовая проверка двух уязвимостей: сохраните сайты для массовой проверки в urls.txt Воспроизведение...

GoGhost

GoGhost GoGhost è uno strumento Open Source ad alte prestazioni, leggero e portatile per la scansione di massa SMBGhost. Installazione Puoi scaricare il Binario Windows o il Binario Linux. In alternativa, GoGhost utilizza librerie native Golang, quindi il comando sopra è sufficiente per compilarl...

firebaseExploiter

Scanner e Exploit CLI per Firebase non sicuri. Caratteristiche • Installazione • Utilizzo Caratteristiche Scansione di massa delle vulnerabilità da una lista di host Dati JSON personalizzati in exploit.json da caricare durante l'exploit Percorso URI personalizzato per l'exploit Utilizzo...

xsssniper

XSSSNIPER xsssniper è un utile strumento di scoperta xss con funzionalità di scansione di massa. Utilizzo: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data ...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI nel plugin WordPress Kubio AI Page Builder Link al write-up dettagliato Link al deploy Link all'exploit Link ai file per la verifica di massa: Modello per la verifica attiva Modello per la verifica passiva...

MassZeroLogon

Strumento per test di massa della vulnerabilità ZeroLogon CVE-2020-1472 Passaggi della procedura Per utilizzare questo strumento hai bisogno di un file hosts con l'ip adress and hostname separated by comma Esempio di file hosts root@kitploit: 1.1.1.1 , WIN-6641554161U 1.1.1.1 , SERVERDATA 1.1.1.1...

yLog4j

yLog4j Dies ist das @PortSwigger Burp-Plugin von Y-Sec für die Log4j CVE-2021-44228 Schwachstelle. Der Fokus von yLog4j liegt auf der Unterstützung von Massen-Scans der Log4j-Schwachstelle CVE-2021-44228. Details und Hintergründe finden Sie in unserem Blog-Beitrag. Anforderungen PortSwigger Burp...

pwn-vbulletin

Mass-Pwn-vBulletin Erkennen Sie anfällige RCE vBulletin 5.0.0 - 5.5.4-Instanzen mithilfe von Shodan CVE-2019-16759 Bulletin Demo Anforderungen: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Hosts sammeln: Dieses Tool durchläu...

Validate-CVE-2023-29489-scanner-

Validate-CVE-2023-29489-scanner Inspirado por https://github.com/haxor1337x/Scanner-CVE-2023-29489 Verifica o XSS CVE-2023-29489 no webcall do Cpanel. Recursos: Varredura em massa de IPs com base em CIDR ou um conjunto de intervalos Varredura baseada em portas comuns específicas do Cpanel...

fuckshitup

Agenda FuckShitUp 0.1 - Scanner Multi-Vulnerabilità In pratica, FSU è un insieme di strumenti scritti in PHP-CLI. Utilizzando funzioni integrate, puoi recuperare URL tramite i motori di ricerca - e quindi, fare dorking per file interessanti e full path disclosure. Usando una lista di URL, lo...

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

CVE-2023-29489

CVE-2023-29489 Scansione di massa della vulnerabilità in Cpanel XSS KALI LINUX sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaa...

CVE-2025-55182-Terminal

Scanner de Vulnerabilidade RSC do Next.js CVE-2025-66478 / CVE-2025-55182 Uma ferramenta leve e multithread de Prova de Conceito PoC projetada para detectar e demonstrar a vulnerabilidade de Execução Remota de Código nos React Server Components RSC do Next.js React2Shell. Esta ferramenta permite...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

f5_scanner

f5scanner Scanner di massa per F5 e checker per CVE-2020-5902 Questo strumento è uno scanner di massa con 30 thread hardcoded, usare con cautela Come configurare root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt Come eseguire IP singolo...

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution RCE and complete compromise of vulnerable websites. The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed...