CVE-2026-23918-Passive-Audit

CVE-2026-23918 审计脚本 或者，你也可以直接 curl 请求头快速瞄一眼，但接下来要登场的是： 用于 Apache HTTP Server 的非侵入式 HTTP 元数据审计工具 CVE-2026-23918（https://www.openwall.com/lists/oss-security/2026/05/04/19）暴露评估。 该工具发送普通 HTTP HEAD/GET 请求，并执行 TLS ALPN 协商以观察 HTTP/2 支持情况。 环境要求 Python 3.13 或更高版本 uv 安装 uv： root@kitploit: curl -LsSf...

CVE-2026-27636

被动侦察与指纹识别工具：检测 FreeScout 部署并分析与 CVE-2026-28289 相关的暴露面 该脚本专注于安全的基础设施情报收集，而非漏洞利用。 它帮助研究人员和防御者了解 FreeScout 实例在真实环境中的部署方式。...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

CVE-2026-24061 GNU inetutils Telnet 检测器 一个安全、被动的检测工具，用于识别潜在的 CVE-2026-24061 暴露风险，该漏洞影响特定版本的 GNU inetutils telnet 。 本项目专为 DevOps 流水线 、基础设施审计 和 防御性安全组合 而设计。 什么是 CVE-2026-24061？ CVE-2026-24061 是一个影响特定版本 GNU inetutils telnet 的漏洞。如果系统安装了受影响版本且 telnet 客户端或服务可访问，则可能存在风险。 本工具 不会利用 该漏洞。 受影响版本 GNU inetutil...

copy-fail-cve-2026-31431

CVE Checker for Copy Fail CVE-2026-31431 Authors/Contributors : Patrick Doyle Author/Maintainer, Effie Renard Co-Author, Kimberly-Lee Banks Co-Author, Chris F. Support/Code Review AI Disclosure : Claude Code used for writing tests files, writing test data, and a code security review. All edits we...

cve-2026-1731-scanner

CVE-2026-1731 — BeyondTrust RS/PRA 被动漏洞扫描器 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║ PASSIVE SCANNER —...

sdwan-scanner-CVE-2026-20127

Escáner de Exposición Cisco SD-WAN CVE-2026-20127 Una herramienta especializada de fingerprinting pasivo diseñada para identificar instancias de Cisco SD-WAN vManage / Viptela expuestas a internet. Esta herramienta ayuda a investigadores de seguridad y administradores de sistemas a gestionar su...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

livewire-vuln-scanner

Livewire 被动漏洞扫描器 Livewire Passive Vulnerability Scanner 是一款基于 Python 2.7 的工具，旨在被动检测网站使用的 Livewire 版本 ，并通过版本比较识别潜在漏洞。 该扫描器不会利用 任何漏洞。它仅分析公开可访问的页面内容（HTML/JavaScript），以确定所检测到的 Livewire 版本。 功能特性 被动漏洞检测（非侵入式） 多线程扫描，提升性能 实时保存漏洞结果 自动 URL 规范化（http / https） 简洁清晰的输出（基于域名） 兼容 Python 2.7 检测逻辑...

CVE-2026-9082

Drupal CVE-2026-9082 扫描器 半被动扫描器，用于检测可能受 CVE-2026-9082（PostgreSQL SQL注入）影响的 Drupal 安装。 不发送 SQL 有效载荷。不进行改变状态的请求。 受影响版本 分支| 受影响版本| 修复版本 ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x| 10.5.0 — 10.5.9| 10.5.10 10.6.x| 10.6.0 — 10.6.8| 10.6.9 11.1.x| 11.0.0 — 11.1.9| 11.1.10 11.2.x| 11.2.0 —...

disclo

disclo ドメインの連絡先ファインダー。ドメインを入力すると、関連するすべてのメール、ハンドル、リードを、12のパッシブソースから並行して取得します。 root@kitploit: $ python disclo.py gitlab.com disclo - gitlab.com ---------------------------------------------------------------------- hackerone https://hackerone.com/gitlab url 例： root@kitploit: python disclo.py...

RSC-Infra-Scanner

Escáner de Infraestructura RSC rscinfrascan.py es una herramienta rápida y asíncrona en Python que identifica dominios con posible infraestructura Next.js App Router / React Server Components RSC. No explota ninguna vulnerabilidad. Solo realiza huellas dactilares pasivas HTTP/HTML/cabeceras para...

bug-bounty-reports-desai-vinayak

🧩 Bug Bounty Reports — Desai Vinayak 🔒 Bug bounty and vulnerability research reports by Desai Vinayak. This repository collects passive, non-destructive vulnerability write-ups and supporting evidence for coordinated disclosure and remediation tracking. 📁 Contents 📂 reports/ — PDF, DOCX, and...

citrixInspector

CVE-2023-3519 Inspector El cve20233519inspector.py es un escáner de vulnerabilidades basado en Python para detectar la vulnerabilidad CVE-2023-3519 en Citrix Gateways. Realiza un análisis pasivo y fingerprinting de los sitios web objetivo para evaluar su vulnerabilidad basándose en una serie de...

VMware vCenter Server - Out-of-Bounds Write

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...

osint-suspicious-recruitment-case

Investigación OSINT: Caso de Reclutamiento Sospechoso Este repositorio documenta una investigación de OSINT Open Source Intelligence centrada en una actividad de reclutamiento sospechosa vinculada a múltiples plataformas, números de teléfono y servicios en línea. El objetivo de este proyecto es...

CVE-2026-80585

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

Astra Linux – Vulnerability in curl

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port. In this way, the malicious server can potentially enable curl to extract information about services that would otherwise be private and undisclosed. This could...

Astra Linux – Vulnerability in libcommons-net-java

Prior to Apache Commons Net 3.9.0, Net’s FTP client trusted the host based on the PASV response by default. A malicious server could redirect the Commons Net code to use a different host, but the user had to connect to the malicious server in the first place. This could result in the leakage of...

Astra Linux – Vulnerability in xorg-server, xwayland

A heap-based buffer overflow vulnerability was discovered in the X.org server’s ProcXIPassiveGrabDevice function. This issue occurs when length values that are swapped in bytes are used in responses, potentially leading to memory leakage and segmentation faults, especially when triggered by a...

Astra Linux – Vulnerability in Python 2.7, Python 3.7

A flaw was discovered in Python, specifically in the FTP File Transfer Protocol client library when operating in PASV passive mode. The issue arises from how the FTP client defaults to trusting the host based on the PASV response. This flaw allows an attacker to create a malicious FTP server that...