CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

fat-finger

Fat-Finger Extends the original finger.nse and attempts to enumerate current logged on users through a full match of the username and a partial match of the GECOS field in /etc/passwd Example output: root@kitploit: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passwd from remote system using Solarwinds CVE-2023-23333 vulnerability Save the script into a file named solar-CVE-2023-23333.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script...

Redpoint

Redpoint Digital Bond 的 ICS 枚举工具 Redpoint 是 Digital Bond 的一个研究项目，用于枚举 ICS 应用和设备。 我们在评估中使用 Redpoint 工具来发现 ICS 设备并获取对二次测试有帮助的信息。其中部分工具将作为 Nmap NSE 脚本在本仓库中向公众开放。 Redpoint 工具使用合法的协议或应用命令来发现和枚举设备及应用。本工具不试图利用漏洞或使任何东西崩溃。然而，许多 ICS 设备和应用较为脆弱，任何意外流量都可能导致其崩溃或以意外方式响应，因此请谨慎使用。 每个脚本都在下面进行了说明，并以 .nse 文件形式存在于本仓库...

nsearch

root@kitploit: ================================================ | \ | |/ || | | | | | |\ --. | | | | | . | --. | | / || '| / || ' | | |\ |// /| | | | || | | | | | | | // / ,||| ||| || ================================================ Version 0.4b http://goo.gl/8mFHE5 @jjtibaquira Email:...

CVE-2022-22965

CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE Checker Non-Intrusive This script looks the existence of CVE-2022-22965 Spring Framework 5.2.x / 5.3.x RCE uses a payload "/?class.module.classLoader.definedPackages%5B0%5D=0" through a GET request looking 400 code as response NON...

vulscan

vulscan - 使用 Nmap 进行漏洞扫描 简介 Vulscan 是一个模块，它将 nmap 增强为漏洞扫描器。nmap 的 -sV 选项可对每个服务进行版本检测，用于根据识别出的产品确定潜在漏洞。数据在 VulDB 的离线版本中查找。 安装 请将文件安装到 Nmap 安装目录的以下文件夹中： root@kitploit: Nmap\scripts\vulscan\ 像这样克隆 GitHub 仓库： root@kitploit: git clone https://github.com/scipag/vulscan scipagvulscan ln -s...

apache-flink-directory-traversal.nse

This repository does not have a README...

nmap-nse-vulnerability-scripts

NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Vulnerability Assessment and OSINT: CVE-2012-1823 My repository documents the process of identifying, analyzing, and gathering Open Source Intelligence OSINT on a specific security vulnerability detected during a target network scan. Overview of the Process The workflow carried out across this...

CVE-2023-22515-NSE

CVE-2023-22515-NSE This repository provides a tool to check for the presence of the CVE-2023-22515 vulnerability in Atlassian Confluence Server using the Nmap Scripting Engine NSE. Overview of CVE-2023-22515 CVE-2023-22515 is a critical vulnerability in Atlassian Confluence Server that allows...

freevulnsearch

freevulnsearch This NMAP NSE script is part of the Free OCSAF project - https://freecybersecurity.org. In conjunction with the version scan "-sV" in NMAP, the corresponding vulnerabilities are automatically assigned using CVE Common Vulnerabilities and Exposures and the severity of the...

cve-2021-41773-nse

cve-2021-41773-nse By George Labrin @creadpag N|Solid Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: root@kitploit: sudo nmap -Pn...

nmap-nse-scripts

用于 NSE（Nmap 脚本引擎）开发的仓库。你将在这里找到我的脚本（包括非官方脚本）、库、资源以及来自我的工作坊的其他相关材料。 待办事项 -完成 SMB2 NSE 库 -目前正在开发密码变形功能 Paulino Calderon calderonwebsec.mx http://calderonpale.com...

NSE_CVE-2025-55182

NSECVE-2025-55182 Nmap NSE script for scanning React2Shell CVE-2025-55182 Disclaimer The following code is provided for educational and research purposes only. Any use of this script is solely at the discretion and responsibility of the user. This scanner may produce false positives or inconclusi...

nse-log4shell

nse-log4shell Nmap NSE 脚本，用于检查 log4shell 或 LogJam 漏洞（CVE-2021-44228）。 这些 NSE 脚本检查互联网上最常用的暴露服务。这是一个基础脚本，你可以自定义 payload。 示例 请注意，NSE 脚本只会向服务发出请求。Nmap 不会报告易受攻击的主机，你需要检查 DNS 日志来确定漏洞。如果你没有手动指定 payload，NSE 脚本将默认使用 dnslog.cn。这意味着请求将被 dnslog.cn 看到。 借助 dnslog.cn 快速开始 切换到这些脚本所在的目录，并执行以下命令（Nmap 会自动获取...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...

nse-exchange

nse-exchange Nmap NSE scripts to check against exchange vulnerability CVE-2022-41082. NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works. Examples Since, there is no patch currently - only workarounds are checked if host is...

ip-https-tools

ip-https-tools A collection of tools for the IP over HTTPS IP-HTTPS Tunneling Protocol used by Microsoft DirectAccess to send Teredo related IPv6 packets over an IPv4-based HTTPS session. MS-IPHTTPS protocol pecification DirectAccess Technical Overview DirectAccess Requirements DirectAccess...