Cobaltstrike-MS17-010

Cobaltstrike Aggressor Script ms17-010 exploit tool and scanner. 1. Download files in cobaltstrike's root folder. 2. Import "aggressor.cna" ms17-010 exploit tools just support win7 x64 and win2008 r2 pwn/Invoke-EternalBlue.ps1 from Empire getinfo/Invoke-EternalScan.ps1 from @vletoux...

CVE-2022-21661

WordPress CVE-2022-21661 Scanner Usage root@kitploit: python wordpressscanner.py -H -p -ssl -proxy -path Help root@kitploit: WordPress Scanner for CVE-2022-21661 options: -h, --help show this help message and exit -H HOST, --host HOST Host or IP address -p PORT, --port PORT Port number -ssl,...

CVE-2025-5349-Scanner

CVE-2025-5349 Vulnerability Scanner Usage root@kitploit: python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...

CVE-2019-14287-

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

CVE-2014-0160-Scanner

CVE-2014-0160-Scanner This is a simple php command line script to check an array of domains for the CVE-2014-0160 vuln to run: php index.php Credits: It uses the service provided by http://filippo.io/Heartbleed/...

skill-scanner

Skill Scanner...

qark

Kit de Revisión Rápida de Android Esta herramienta está diseñada para buscar varias vulnerabilidades de seguridad en aplicaciones Android, ya sea en código fuente o en APKs empaquetadas. La herramienta también es capaz de crear APKs desplegables de "Prueba de Concepto" y/o comandos ADB, capaces d...

dora

dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...

heartbleedscanner

Escáner Heartbleed Escáner de red para la fuga de memoria de OpenSSL CVE-2014-0160 -t parámetro para optimizar el tiempo de espera en segundos. -f parámetro para registrar la fuga de memoria de los sistemas vulnerables. -n parámetro para escanear la red completa. -i parámetro para escanear desde ...

CVE-2025-29927-scanner

Next.js Version Vulnerability Scanner by nocomp Overview This Python script is a comprehensive tool for scanning multiple subdomains to detect Next.js versions and identify potential CVE-2025-29927 vulnerabilities. It provides a detailed analysis of web applications built with Next.js across...

SMBGhost

SMBGhost Simple threaded scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A...

Test_CVE-2024-6387

CVE-2024-6387 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

octoscan

:octocat: octoscan Octoscan es un escáner estático de vulnerabilidades para flujos de trabajo de GitHub Actions. Tabla de contenido Tabla de contenido Instalación Uso descargar flujos de trabajo remotos analizar GitHub action Reglas dangerous-checkout dangerous-action dangerous-write...

CVE-2024-6387

Project Information Name Project : POC - CVE-2024-6387 - Scanner OpenSSH is a suite of secure networking utilities based on the SSH protocol that are essential for secure communication over unsecured networks. It provides robust encryption, secure file transfers, and remote server management...

trivy-action

Trivy Action GitHub Action para Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Tabla de contenido Uso Escanear Pipeline de CI Escanear Pipeline de CI con Configuración de Trivy Caché Configuración de Trivy Escanear un Tarball Usar...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Introduction we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerabilitylog4shell in their AWS account. We currently support "CVE-2021-44228" and "CVE-2021-45046" RCE vulnerabilities. The script...

ProxyShell_POC

ProxyShellPOC POC for scanning ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 usage: python3 Proxyshell.py ip...

loxs-optimized

loxs-optimized Project from https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Note: It mainly bypasses the CSP payload 2024-11-06 Add CSP-Bypass-xss.txt to xss.txt 2024-11-07 Removing interfering information Only the vulnerable information is displayed 2024-11-11 Solves the problem that the...

ghostport

Ghostport Ghostport is a sophisticated port spoofing tool designed to confuse and mislead port scanners. It's a Rust implementation inspired by the concept of portspoof, offering enhanced performance and flexibility. Features Dynamic Port Emulation : Responds to port scans with a variety of...

spring4shell-scan

spring4shell-scan Un escáner completamente automatizado, fiable y preciso para encontrar vulnerabilidades Spring4Shell y Spring Cloud RCE Características Soporte para listas de URLs. Fuzzing con más de 10 nuevos payloads de Spring4Shell las herramientas vistas anteriormente usan solo 1-2 variante...