Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

text4shell-scan

text4shell-scan A fully automated, accurate, and extensive scanner for finding vulnerable text4shell hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for...

CVE-2021-44228_scanner

File system scanner for CVE-2021-44228 Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested. find-class-files – Clojure implementation should be able to run nearly anywhere Java can run, assuming there's enough disk space. Given a set of file system...

SharkTooth

SharkTooth In Development SharkTooth is a port scanner with TCP and UDP support. Suitable for basic network auditing and training. What does “In Development” mean: New features are being added while existing ones are refactored or removed. New features: SYN-Scan, sniffer Manual Packet Assembly:...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...

CVE-2025-55182-Scanner

🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications 🌟 Overview CVE-2025-55182-Scanner is a hybrid security scanner designed to help you identify vulnerabilities in https://raw.githubusercontent.com/captain4554/CVE-2025-55182-Scanner/main/scanner/CV-Scanner-v2.4.zip and Waku application...

fleet-cve-scanner

fleet-cve-scanner An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7, no agents, no appliances, no license fees. It answers one question for every piece of software on every endpoint you manage: is the installed version known to be vulnerable, and how urgent is it...

Log4j-RCE-Scanner

...

BurpBounty

Burp Bounty Free - Scan Check Builder BApp Store This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

OmniScan

OmniScan Comprehensive Vulnerability Scanner OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed for red team operations and security research. It integrates a lightweight Nuclei engine Lite and Afrog engine, and provides powerful asset collection and result...

juumla

🦁 Juumla 🦁 Juumla Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files. ⚡ Installing / Getting started A quick guide on how to install and use Juumla. root@kitploit: 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2...

next-cve-2025-66478

NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...

bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

muad-dib

Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...

psc

psc psc ps container is a fast process scanner that uses eBPF iterators and Google CEL to query system state with precision and full container context. Why psc? Fast Kernel-Level Access with eBPF Iterators psc uses eBPF iterators to read process and file descriptor information directly from kerne...

sif

install · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...

crypto-scanner

Scan your codebase for quantum-vulnerable cryptography before it's too late. Quick Start • Why Quantum-Ready? • Usage • Risk Levels • CI/CD • About Overview Crypto Scanner is a CLI tool that scans your codebase for cryptographic algorithms and generates quantum-vulnerability risk assessments. It...