VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

ShellcodeFluctuation

Shellcode Fluctuation PoC A PoC implementation for an another in-memory evasion technique that cyclically encrypts and decrypts shellcode's contents to then make it fluctuate between RW or NoAccess and RX memory protection. When our shellcode resides in RW or NoAccess memory pages, scanners such ...

CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX

FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

This repository does not have a README...

scada-scanner

SCADA Scanner and Fingerprinter Overview A high-performance, asynchronous SCADA/ICS scanner for identifying and fingerprinting industrial control systems across networks. Detects vulnerabilities, identifies vendors/products, and generates comprehensive risk reports. WARNING: For authorized securi...

React2Shell-Scanner

🔬 React2Shell Scanner Web Application Security Assessment Framework for React and Next.js Applications ⚠️ Important Notice This tool is designed for authorized security testing only. ✅ Authorized penetration testing ✅ Bug bounty programs within scope ✅ Security research with permission ✅ Testing...

apkprobe

APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...

modbus-scanner

Modbus Detection Scanner A multithreaded C scanner for detecting Modbus/TCP services using libmodbus. The scanner does not rely only on TCP port 502 being open. Instead, it establishes a Modbus/TCP connection and sends an application layer Modbus request. A valid Modbus response is used as the...

regreSSHion-nmap-scanner

This repository does not have a README...

CVE-2020-0796-Scanner

Inspired by ollypwn's SMBGhost script, I wrote my own script and shared it. root@kitploit: import socket import binascii import sys payload =...

CVE-2025-29927-scanner

CVE-2025-29927 Scanner This Python script identifies hosts vulnerable to CVE-2025-29927, an improper authorization vulnerability in the Next.js middleware that may allow authentication bypass. The script checks for Next.js usage, identifies the version, detects the x-middleware-subrequest header,...

log4j-scanner

Log4j Scanner Discover Log4Shell vulnerability CVE-2021-44832 in your files and directories. Description This Rust-based Log4j Scanner is designed to help you identify and locate vulnerable files that may contain the Log4Shell vulnerability CVE-2021-44832. It scans files and directories to find...

CVE-2025-30208

🔥 Vite Dev Server Vulnerability Scanner CVE-2025-30208 🚀 Overview This tool scans for CVE-2025-30208, a vulnerability in the Vite Dev Server. It allows security researchers to quickly detect vulnerable instances using multiple payloads. ⚡ Features ✅ Single URL scanning -u URL ✅ Mass scanning from...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation root@kitploit: python -m venv venv source venv/bin/activate pip install -r...

CVE-2023-6895

CVE-2023-6895 Vulnerability Scanner This is a simple Python script for scanning websites to check for the CVE-2023-6895 vulnerability. It sends modified requests to the target URL and checks the response for the vulnerability. Requirements Python 3 requests library tqdm library You can install th...

CVE-2024-6387-Checker

CVE-2024-6387-Checker This tool scans your network for hosts running vulnerable versions of OpenSSH CVE-2024-6387. It can handle single IPs, multiple IPs, CIDR ranges, and CSV files with custom ports. Requirements Install the required libraries using pip: root@kitploit: pip install paramiko netad...

codeql-scanner

drupalgeddon2 The exploit python script for CVE-2018-7600...

zombieguard

ZombieGuard A defensive scanner for structural metadata evasion in ZIP archives. ZombieGuard detects contradictions between ZIP local file headers, central directory records, and payload characteristics. These contradictions can be used to make archive contents appear empty or harmless to one...

libSSH-bypass

libSSH-bypass Implementation of CVE-2018-10933 // but with a CIDR block scanner. Didn't feel like spending $$ on Shodan's API, so i've added a range scanner that dumps vuln servers into a file with a soft scan. you'll need to pip install paramiko as a dependency. this is an early PoC version, I'l...