f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options root@kitploit: -h, --help show this help message a...

ioc-scanner-CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2019-19781. The utility, and its resources, encode indicators of compromise collected during FireEye Mandiant investigations. To learn more, plea...

CVE-2022-40684-metasploit-scanner

CVE-2022-40684-metasploit-scanner An authentication bypass using an alternate path or channel in Fortinet product preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner cd CVE-2022-40684-metasploit-scanner mkdir -p...

libssh-scanner

libssh scanner: CVE-2018-10933. It'll scan for vulnerable server for CVE-2018-10933 based on ssh's banner. This scanner is based on the work of Leap Security. USAGE root@kitploit: libssh-scan...

skipfish

=========================================== skipfish - web application security scanner http://code.google.com/p/skipfish/ Written and maintained by: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012 Google In...

vulnupnp

vulnupnp Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959...

supply-chain-guard

Supply Chain Guard SCG An incident-response toolkit for npm/yarn and Python pip/poetry/uv supply chain attacks — free, local, dependency-free. SCG is not a scanning engine that competes with commercial tools on coverage. It is a Claude Code skill and standalone shell toolkit that does three thing...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS is a fully functional Cross-site scripting vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

jugular

jugular Use jugs to look for CUPS: an ultrafast UDP sender, that tries to tickle listening cups-browsed processes to do a HTTP callback. This is a high performance scanner that writes UDP packets directly to the network. Install Ubuntu or similar root@kitploit: sudo apt install golang...

f5_scanner

f5scanner F5 mass scanner and CVE-2020-5902 checker This tool is mass scanner with 30 threads hardcoded use with caution How to setup root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt How to run Single IP python3 f5scanner.py --ip...

dotenv-diff

dotenv-diff Scan your codebase to detect every environment variable reference. It helps you catch missing, unused, duplicated, and misused variables early, before they cause runtime errors. First class support for SvelteKit, Next.js, and Nuxt. Also works well in modern JavaScript/TypeScript...

nmap

nmap 本库旨在为 go 开发者提供符合习惯用法的 nmap 绑定，以便更轻松地使用 golang 编写安全审计工具。 什么是 nmap Nmap（Network Mapper）是一款由 Gordon Lyon 创建的免费开源网络扫描器。Nmap 通过发送数据包并分析响应，来发现计算机网络上的主机和服务。 Nmap 提供了许多用于探测计算机网络的特性，包括主机发现、服务检测与操作系统检测。这些特性可以通过脚本进行扩展，以提供更高级的服务检测、漏洞检测等功能。Nmap 还能适应扫描过程中的网络状况，包括延迟和拥塞。 为什么要用 Go 进行渗透测试 目前大多数渗透测试工具都是用 Pytho...

s4e-cve-scanner

Latest-CVE-Scanner This API allows you to scan latest Common Vulnerabilities and Exposures CVE. This code written for Security For Everyone users. You can register at https://securityforeveryone.com/user/register for free scans. Before we get started, it's good to know: root@kitploit: 1. In order...

cve-2020-00796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...

NotProxyShellScanner

NotProxyShellScanner Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082. Setup Install the requirements all that's required is python3 requests. root@kitploit: pip3 install -r requirements.txt Running There are a few options when it comes to running the tooling:...

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

RED_HAWK

Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...

wp2shell-scanner

wp2shell-scanner 由@bahartanir katherinepierce 编写 基于 ZephrFish/wp2shell-scanner 的分支，并包含额外改进。 研究贡献：Adam Kues Assetnote 与 Mustafa Can İPEKÇİ nukedx。 用于检测和验证 WordPress 核心是否暴露于 wp2shell（CVE-2026-63030 / CVE-2026-60137）的工具。通过标志选择模式，目标为位置参数。--scan 对核心版本进行指纹识别，并确认 REST /batch/v1...

web-scanner

🌐 Web Scanner Tool 🌐 Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. 📷 Screenshots 📷 👇 💫 How to Use 💫 👇 📒 Read Me 📒 The Advanced Web Scanner is a versatile...

signature-base

Signature-Base Signature-Base is the YARA signature and IOC database for our scanners LOKI and THOR Lite Focus of Signature-Base 1. High quality YARA rules and IOCs with minimal false positives 2. Clear structure 3. Consistent rule format Directory Structure iocs - Simple IOC files CSV yara - YAR...