yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

Scannerweb

Scannerweb Escáner de vulnerabilidades escrito en Python3. Fuzzifica todas las URLs del sitio web objetivo y luego las escanea para el escáner web. Captura de pantalla Navegue al directorio /opt opcional root@kitploit: cd /opt/ Clone este repositorio root@kitploit: git clone...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

citrixInspector

CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...

Gemini-api-key-hunter

Gemini API Key Toolkit A toolkit for discovering, validating, and testing exposed Google Gemini API keys. It consists of two components: Gemisc.py – A high-speed Python scanner that discovers exposed Google API keys from websites and JavaScript files, verifies them against the Gemini API, and...

Google-api-key-scanner

Overview A Python tool for testing Google Maps API keys against 21 different Google API endpoints to check which services are exposed and vulnerable. !IMPORTANT 🎥 For a complete walkthrough of the tool, watch the demo video here: https://youtu.be/3KMUnLdlOSE. The feature shown below starts at...

CVE-2022-21661-PoC

CVE-2022-21661-PoC A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC Installation root@kitploit: pip3 install -r requirements.txt Usage root@kitploit: usage: main.py -h -u URL -f FILE Identify CEV-2022-21661 in Wordpress instances. options: -h, --help show this help message and exit -u...

py-log4shellscanner

PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...

cve-2024-24919

Recon Tool Installation 1. git clone https://github.com/satchhacker/cve-2024-24919.git 2. cd cve-2024-24919 3. chmod +x cve-2024-24919.sh 4. ln -s $pwd/cve-2024-24919.sh /usr/bin/cve-2024-24919.sh To use the tool, simply run: cve-2024-24919 Usage This tool will make a curl request to the ip/domai...

WSPIH

WSPIH Escáner de archivos de información personal sensible de sitios web Declaración: Este proyecto es solo para fines educativos, pruebas e intercambio. No lo utilice para fines ilegales. Si el objetivo es un sitio web escolar, por favor envíe la vulnerabilidad a la Plataforma de Reporte de...

CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner

CYBERDUDEBIVASH FortiSIEM CVE-2025-64155 Scanner Authorized high-impact tool from CYBERDUDEBIVASH ECOSYSTEM to detect CVE-2025-64155 FortiSIEM phMonitor Command Injection. Scans for open ports and vulnerable behaviors ethically. Features Port check for TCP/7900 Optional safe probe for handler...

killshot

This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...

nerve

Motor de Explotación, Reconocimiento y Vulnerabilidades de Red N.E.R.V.E Tabla de Contenidos Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usag...

CVE-2021-22986

CVE-2021-22986 This is a simple script to determine whether an IP is vulnerable to this CVE from a mass ip addresses. For finding mass ip addresses use shodan or zoomeye cli. Save all the ips in a file name here "testips.txt"...

log4j2burpscanner

JUST FOR TESTING，DON'T ATTACK ANYONE JUST FOR TESTING，DON'T ATTACK ANYONE JUST FOR TESTING，DON'T ATTACK ANYONE 交流群 二维码失效请加微信f-f0ng、备注log4j2burpscanner交流 关注主页公众号（only security），回复log4j2burpscanner获取下载地址】 FAQ Frequently Asked Questions how to use? download the latest plugin...

log4j2burpscanner

SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusión Si el código QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

prowler

Prowler Prowler es un escáner de vulnerabilidades de red implementado en un clúster de Raspberry Pi, desarrollado por primera vez durante el hackathon de la comunidad de seguridad informática de Singapur - HackSmith v1.0. Capacidades Escanear una red una subred particular o una lista de direccion...