sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

faraday_plugins

Install root@kitploit: pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path root@kitploit: faraday-plugins list-plugins Test...

CVE-2024-4879

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 Description: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute...

ServiceNow - Cross-Site Scripting

ServiceNow through San Diego Patch 4b and Patch 6 contains a cross-site scripting vulnerability in the logout functionality, which can enable an unauthenticated remote attacker to execute arbitrary JavaScript. id: CVE-2022-38463 info: name: ServiceNow - Cross-Site Scripting author: amanrawat...

ServiceNow - Cross-site Scripting

A XSS vulnerability was identified in the ServiceNow UI page assessmentredirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks,...

CVE-2024-4879

CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability. Overview This tool is designed for bulk scanning of the ServiceNow CVE-2024-4879 vulnerability. It is inspired by Assetnote security research, which covers the recent ServiceNow CVE-2024-4879, CVE-2024-5178, and...

snowpick

snowpick 是一个 ServiceNow 暴露面扫描器，用于发现配置错误的小部件 ACL、REST API 访问控制以及未认证的数据暴露。 ServiceNow 通过两个常见的公共暴露面暴露数据：Service Portal 小部件和 Table REST API。当任一暴露面上的访问控制配置错误时，未认证的用户可能能够查询内部记录，例如事件工单、用户目录、知识库文章和服务目录项。snowpick 会测试这两个暴露面，将行数据暴露与仅计数证据区分开来，并为授权验证生成复现详情。 工作原理 snowpick 无需任何凭据即可从 ServiceNow...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - 威胁测绘 AI 安全事件研究：ServiceNow Virtual Agent 漏洞 CVE-2025-12420 发生了什么？ 在 ServiceNow AI 平台中发现了一个严重漏洞，该漏洞使未经身份验证的攻击者能够冒充合法用户，并以这些用户的权限执行操作。 由于 Virtual Agent 身份验证过程中的弱点，攻击者可以： 绕过身份验证控制 冒充特权用户 执行管理操作 创建新账户 修改平台资源 事件摘要 类别| 详情 ---|--- 漏洞| CVE-2025-12420 平台| ServiceNow AI 平台 受影响组件| Virtual...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py 是一个 Python 脚本，用于检测 ServiceNow 实例中的特定漏洞，并在发现漏洞时导出数据库连接信息。该工具对安全研究人员和渗透测试人员尤为有用。 功能 扫描 URL，检测 ServiceNow 中的特定漏洞。 若检测到漏洞，导出数据库连接信息。 处理 SSL 警告和请求超时。 通过颜色标记的结果提供清晰的控制台输出。 环境要求 Python 3.x requests 库 argparse 库 urllib3 库 colorama 库 安装 1. 克隆仓库： root@kitploit: git clone...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - ServiceNow 预认证 RCE 漏洞利用框架与 PoC 验证器 🔥 ServiceNow AI 平台 — JavaScript 注入 → 沙箱逃逸 → RCE → Root 提权 漏洞利用框架与安全验证器 仅供授权安全测试使用。 ⚖️ 法律免责声明与负责任使用 本工具仅供教育和授权渗透测试目的使用。 作者和贡献者不对因使用本软件而造成的任何滥用或损害负责。用户须自行确保在测试前已获得目标所有者的明确书面许可。根据《计算机欺诈与滥用法》（CFAA）及全球类似法律，未经授权访问计算机系统属于违法行为。 使用本软件即表示您同意：...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

CVE-2024-4879

CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...

CVE-2021-45901

CVE-2021-45901 ServiceNow - Username Enumeration PoC Code enumSNOWUsers.py - SNOW User Enumerator Title Username Enumeration Vulnerability found in ServiceNow Application Published: Version: 1.0 Vendor: ServiceNow Product: ServiceNow https://www.servicenow.com/ Version affected: Orlando...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879 和 CVE-2024-5217 ServiceNow RCE 扫描 使用 Nuclei 和 Shodan Dork 扫描 CVE-2024-4879 和 CVE-2024-5217 ServiceNow RCE 漏洞。 漏洞信息资源 https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data 使用方法 nuclei -t CVE-2024-4879-Detect-Database-ServiceNow.yaml -l...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 与 CVE-2025-11450 修复脚本 概述 该脚本可自动检测并修复 ServiceNow UI Macros 中的 CVE-2025-11449 和 CVE-2025-11450 安全漏洞。如果用户控制的 sysparm 参数未得到正确清理，这些漏洞可能通过特制链接在用户浏览器中执行任意代码。 受影响的 UI Macros $pwdverifyemail $pwdverifypersonaldataui 脚本功能 该脚本执行两项关键安全修复： 1. 块外部：添加正确的编码 将易受攻击的模式替换为正确编码的版本： $sysparm ...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow 是一个业务转型平台，可帮助企业管理企业运营的数字工作流程。 CVE-2024-4879 可能允许未经身份验证的用户在 Now 平台中远程执行代码。该漏洞通过串联利用三个问题来访问 ServiceNow 数据：Title Injection、Template Injection Mitigation Bypass 和 Filesystem Filter Bypass。 受影响的版本包括 Vancouver、Washington DC Now 和 Utah 平台版本 用法： python3 exploit.py -i...

ServiceNow - Incomplete Input Validation

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...