43 matches found
AutoDirbuster
root@kitploit: / | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Automatically run and save ffuf scans for multiple IPs Contents Quick Run FAQ Why? What is the recommended usage? What data does this need? How...
mzap
mzap mzap 是一个用于多目标 ZAP 扫描的 Crystal CLI 工具。它将目标分发到一个或多个 ZAP API 主机，支持可选的等待模式，并可以导出报告。 功能 扫描命令：spider、ajaxspider、clientspider（ZAP 2.16+）、ascan、pscan 支持 openapi、soap、graphql 和 postman 的 API 定义导入 ZAP 2.16+ 的 Sites Tree export/prune，用于差异/增量扫描 扫描策略发现（policies） 多主机轮询调度分发 可选的等待/轮询模式，支持超时...
pocsuite3
pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...
cve2025-20265
cve2025-20265 Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker. Cisco FMC CVE-2025-20265 Vulnerability Checker Safe What it does: Uses...
CVE-2023-4596-OpenSSH-Multi-Checker
CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checker.sh script is a tool designed to check multiple targets IPs or hostnames at once for the CVE-2024-6387 vulnerability. This script performs a local OpenSSH version check, scans remote servers for SSH banners, and determines whether they...
JQShell
JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...
CVE-2022-29464
CVE-2022-29464 WSO2 远程代码执行 CVE-2022-29464 使用方法 • 此漏洞利用仅适用于多个目标 python3 exploit.py --file urls.txt 参考 https://github.com/hakivvi/CVE-2022-29464...
CVE-2005-1794Scanner
CVE-2005-1794Scanner 可用于扫描多个存在 CVE-2005-1794 漏洞的目标。 感谢 @daveysec 及其原始脚本，可在 https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/python/CVE-2005-1794-check.py 获取。 免责声明 我对您使用本软件不承担任何责任。开发工作仅代表个人能力，与我的工作无关。 设置 需要为 Python 安装以下依赖。 root@kitploit: python3 -m pip install requests, tqd...
log4j-fuzzer
log4j-fuzzer Para un solo objetivo root@kitploit: chmod +x log4j Después de ese comando, simplemente coloca tu objetivo root@kitploit: ./log4j TUURLOBJETIVO TUSERVIDORREMOTO Para múltiples objetivos Reúne todos los dominios, subdominios y directorios en una lista Después de eso, simplemente ejecu...
CVE-2025-5349-Scanner
CVE-2025-5349 Vulnerability Scanner Usage root@kitploit: python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...
CVE-2026-42031-SQL-Injection-Scanner
🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...
CVE-2026-74889
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889
The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...
Exploit for CVE-2026-64638
🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
📄 HTTP/2 Multi-Server HPACK Exhaustion
This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 — WHM/cPanel Kimlik Doğrulama Atlama Araştırma...
Malicious code in mbt (npm)
Supply chain compromise of legitimate SAP packages published by threat actor "[email protected]" impersonating SAP toolchain maintainers. All four compromised packages share the same fingerprint: setup.mjs 4.4 KB and execution.js 11.1 MB bundled in the tarball, with a preinstall hook of "node...