CVE-2025-29927

CVE-2025-29927 Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process large URL lists, detect vulnerabilities, and save results. Features connection pooling, caching, and chunked processing for fast performance...

Log4J-Scanner

Extensión de Burp para escanear la vulnerabilidad Log4Shell CVE-2021-44228 con payloads personalizados...

LogMePwn

LogMePwn LogMePwn es un kit de herramientas de escaneo y validación totalmente automatizado, multiprotocolo, confiable y súper rápido para la vulnerabilidad Log4J RCE CVE-2021-44228. Destacados de la herramienta Soporte inherente para la generación automática de Canary Tokens mediante correos...

rapid-reset-check

Rapid Reset Check rapid-reset-check is a small Go CLI for quickly inventorying HTTPS endpoints that expose HTTP/2 and therefore need a CVE-2023-44487 mitigation review. The scanner is deliberately non-exploitative. It resolves each target, opens a certificate-verified TLS connection, offers h2 an...

CVE-2025-49132

CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation root@kitploit: pip install -r requirements-standalone.txt Manual...

Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components:...

CVE-2025-55182-POC

CVE-2025-55182 – Command Injection Vulnerability Scanner Full Proof-of-Concept With Real Command Output This repository contains a Python-based proof-of-concept PoC scanner for CVE-2025-55182, demonstrating how an attacker could exploit a command injection vulnerability through a JSON-based POST...

vulnupnp

vulnupnp Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959...

jugular

jugular Use jugs to look for CUPS: an ultrafast UDP sender, that tries to tickle listening cups-browsed processes to do a HTTP callback. This is a high performance scanner that writes UDP packets directly to the network. Install Ubuntu or similar root@kitploit: sudo apt install golang...

wp2shell-scanner

wp2shell-scanner by@bahartanir katherinepierce Fork of ZephrFish/wp2shell-scanner with additional improvements. Research by Adam Kues Assetnote and Mustafa Can İPEKÇİ nukedx. Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are select...

CVE-2025-24799-scanner

CVE-2025-24799-scanner Scanner for GLPI CVE-2025-24799 vulnerability...

Scanner_CVE_2026-42945

Scanner for detecting Nginx instances vulnerable to CVE-2026-42945 NGINX RIFT. Accepts individual IPs, CIDR ranges, and ASNs as input. About CVE-2026-42945 affects all Nginx versions prior to 1.30.1. The tool probes HTTP and HTTPS on default ports, reads the Server header from the response, and...

log4shell-scanner

log4shell-scanner A dependency-free, defensive scanner for Log4Shell — finds vulnerable log4j-core jars and JNDI exploit patterns in logs and config. Why this project During my CERT-In rotation I worked on threat identification, containment, remediation and threat hunting — exactly the workflow...

reactguard

ReactGuard React2Shell scanner powered by Xint. ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 React2Shell across frameworks that support React Server Components. It also includes detectors for CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. Support stat...

Hscan

Hscan-Win-Gui HScan v1.20 Usage Instructions 1. System Requirements: Windows NT/2000/XP 2. Software Introduction: root@kitploit: Multi-threaded detection of specified IP ranges specified hosts or host lists. GUI and command-line modes. Scan items: -name --- Get hostname; -port --- Default port...

godirb

godirb Fast, modern directory, file, port and FUZZ brute-forcer written in Go. Built for quick scans where you want a modern dirb-like tool: run it, get useful results, tune the obvious flags, and avoid dragging a full fuzzing framework into a simple job. 📦 Installation Go root@kitploit: go insta...

CVE-2021-44228-POC

CVE-2021-44228-POC exploit CVE-2021-44228 download nuclei sudo cp nuclei /usr/bin/nuclei sudo chmod +x /usr/bin/nuclei git clone https://github.com/sec13b/CVE-2021-44228-POC.git mv CVE-2021-44228-POC log4shellexploit mkdir yaml mv .yaml yaml/ run: python3 log4shellexploit.py http://iptoexploit...

CVE-2024-1709

CVE-2024-1709 A Scanner for CVE-2024-1709 - ConnectWise SecureConnect Authentication Bypass Vulnerability Usage create a "hosts.txt" file within the script's directory and include the hosts you intend to scan in the file. Follow me on social media: X: https://x.com/HussainMFathy LinkedIn:...

CVE-2021-3129

CVE-2021-3129 Mass Scan Tools For Laravel = V8.4.2 Debug Mode Remote Code Execution RCE | Python Reference Ambionics.io PHPGCC Chain PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 Environment...

heartbleed-masstest

This tool allows you to scan multiple hosts for Heartbleed, in an efficient multi-threaded manner. This tests for OpenSSL versions vulnerable to Heartbleed without exploiting the server, so the heartbeat request does not cause the server to leak any data from memory or expose any data in an...