cve-2021-41773-nse

cve-2021-41773-nse By George Labrin @creadpag N|Solid Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: root@kitploit: sudo nmap -Pn...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

recon

O.G. AUTO-RECON Features The purpose of O.G. Auto-Recon is to automate the initial information gathering phase and then enumerate based off those results as much as possible. This tool is intended for CTF's and can be fairly noisy. Not the most stealth conscious tool... Command syntax can be easi...

sicat

SICAT - El útil buscador de vulnerabilidades y exploits SICAT es una herramienta potente diseñada para agregar y buscar vulnerabilidades y exploits de múltiples fuentes de alto perfil. Simplifica la fase de reconocimiento verificando automáticamente bases de datos de confianza basadas en palabras...

CVE-2018-1111

CVE-2018-1111 Environment for CVE-2018-1111 Movie Command docker-compose root@kitploit: $ docker-compose up -d Attacker root@kitploit: $ docker-compose exec attacker bash root@attacker / /scripts/attack.sh Ncat: Version 7.50 https://nmap.org/ncat Ncat: Listening on :::1337 Ncat: Listening on...

Smap

alternativa a nmap impulsada por shodan.io Smap es un escáner de puertos pasivo construido con la API gratuita de shodan.io. Acepta los mismos argumentos de línea de comandos que Nmap y produce la misma salida, lo que lo convierte en un sustituto directo de Nmap. Características Escanea 200 hosts...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

ssh-audit

ssh-audit...

LiveTargetsFinder

LiveTargetsFinder Generates lists of live hosts and URLs for targeting, automating the usage of Massdns, Masscan and nmap to filter out unreachable hosts Given an input file of domain names, this script will automate the usage of MassDNS to filter out unresolvable hosts, and then pass the results...

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

kaboom

About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...

nmap-log4shell

Nmap Log4Shell NSE script for discovery Apache Log4j RCE CVE-2021-44228 nmap-log4shell is a NSE script for discovery Apache Log4j RCE CVE-2021-44228 vulnerability across the network. The script is able to inject the log4shell exploit payload via HTTP Headers default or via TCP/UDP socket...

tlsx

Features • Installation • Usage • Running tlsx • Join Discord A fast and configurable TLS grabber focused on TLS based data collection and analysis. Features Fast And fully configurable TLS Connection Multiple Modes for TLS Connection Multiple TLS probes Auto TLS Fallback for older TLS version Pr...

CVE-2019-1653

CVE-2019-1653 NSE script to scan for Cisco routers vulnerable to CVE-2019-1653 Usage: nmap --script cve20191653 -p 443...

xerosploit

Xerosploit Xerosploit is a penetration testing toolkit whose goal is to perform man in the middle attacks for testing purposes. It brings various modules that allow to realise efficient attacks, and also allows to carry out denial of service attacks and port scanning. Powered by bettercap and nma...

ilk-toolkit

IoT Lab KiiT ToolKit ilk-toolkit A Toolkit designed for IoT Lab KiiT to convert any Linux Distro into a Red Team Machine. This project was necessitated by the unreliability of 'kali-linux-everything' repo on certain installations and the subsequent depracation of 'katoolin' repo in Debian-based...

nmap

nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...

autoscan

autoscan.sh Overview autoscan.sh is fully automated penetration test tool linked with Metasploit, nmap and other free avialable tools and report all of this in faraday faraday is one tool, you can use it for other open source reporting tools, an example is to export it in jira. Autoscan identifie...

heartbleed

Patrik Karlsson have implemented ssl-heartbleed and commited into svn.nmap.org. you can get it from https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. they have a discussion here: http://seclists.org/nmap-dev/2014/q2/22 . get more details from http://heartbleed.com Credit to author of ssltest....

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...