3090 matches found
Detecting-CVE-2018-15708-Vulnerabilities
Detecting-CVE-2018-15708-Vulnerabilities...
log4j-samples
log4j-samples Samples of log4j library versions to help log4j scanners / detectors including our own log4j-detector improve their accuracy for detecting CVE-2021-45046 and CVE-2021-44228. The samples include shaded jars, uber jars, spring-boot executable jars, jars inside jars, exploded jars, etc...
CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh
탐지에서 조치까지: Wazuh로 WeasyPrint의 실제 SSRFCVE-2025-68616 사냥 및 패치 TL;DR Kali Linux 머신에서 Wazuh오픈 소스 SIEM/XDR를 사용한 개인 연습 중 취약점 탐지 모듈이 WeasyPrint 패키지에서 높음CVSS 7.5 심각도의 취약점SSRF 보호 우회, CVE-2025-68616을 식별했습니다. 이 발견을 조사하고, 로컬 개념 증명PoC으로 문제를 재현한 후, 프로젝트의 패치된 버전을 적용하고 익스플로잇이 더 이상 작동하지 않음을 확인했습니다. 이 저장소는 탐지, 분석,...
CVE-2020-0688
CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...
Nuclei-Template-CVE-2023-42793.yaml
이 저장소에는 README가 없습니다...
cve-2024-21762-check
CVE-2024-21762 Check Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762. For more information, see this Bishop Fox blog post Usage root@kitploit: python3 check-cve-2024-21762.py In most cases, the script will either output "Vulnerable" or "Patched". It performs minimal...
CVE-2024-5009
CVE-2024-5009 : WhatsUp Gold SetAdminPassword 권한 상승 CVEHunter는 비동기 성능으로 CVE-2024-5009를 탐지하고 악용하기 위한 취약점 탐지 및 공격 도구입니다. 설치 root@kitploit: git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -r requirements.txt python3 cvehunter.py --help 🚀 사용법 root@kitploit: python...
CVE-2024-4358
CVE-2024-4358 An Vulnerability detection and Mass Exploitation tool for CVE-2024-4358 Installation: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Usage: root@kitploit: python3 exploit.py -h / / / / / / / / | |/...
NSE-scripts
Contains Custom NSE scripts CVE-2020-0796 NSE script to detect vulnerable CVE-2020-0796 issue, with Microsoft SMBv3 Compression aka coronablue, SMBGhost The script is a modified version of smb-protocols.nse script with a modified output data for v3.11 detection and validating CVE-2020-0796. Note:...
CVE-2023-29923
CVE-2023-29923 1、Prepare a url.txt, for example: 2、Execute python CVE-2023-29923.py -f url.txt 3、Assets detected with unauthorized access vulnerabilities will be saved in the result.txt file in the same directory...
CVE-2024-0195
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API...
route-sixty-sink
✏️ 기여자 Dillon Franke @dillonfranke Michael Maturi @a-marionette 📝 블로그 https://www.mandiant.com/resources/route-sixty-sink-launch ⚓ Route Sixty-Sink Route Sixty-Sink 는 방어자와 보안 연구자가 자동화된 소스-싱크 분석source-to-sink analysis을 사용하여 모든 .NET 어셈블리에서 취약점을 신속하게 식별할 수 있게 해주는 오픈 소스 도구입니다. 애플리케이션 바이너리 또는 소스 코드 내의...
CVE-2023-24044
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2023-24044 Run bellow command to check CVE-2023-24044 -h Configurations 2. We integrated with the Telegram A...
CVE-2022-21371
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram A...
CVE-2020-3452
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-3452 Run bellow command to check CVE-2020-3452 -h Configurations 2. We integrated with the Telegram API...
gh-workflow-auditor
GitHub Workflow Auditor GitHub 워크플로우에서 보안 문제를 식별하기 위한 워크플로우 감사 도구 사용법 root@kitploit: usage: main.py -h --type repo,org,user --log-level debug,info,warning,error,critical input Identify vulnerabilities in GitHub Actions workflow positional arguments: input User/Org Name or Repo name owner/repo...
CVE-2020-27838
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram A...
log4j-remediation-tools
log4j-remediation-tools log4j2 취약점 CVE-2021-44228을 찾고 재현하기 위한 도구 도구 find-vulnerabilities: 실행 중인 JVM이 취약한지 휴리스틱하게 판단합니다. confirm-vulnerabilities: 실행 중인 JVM이 취약한지 100% 정확도로 판단합니다. 사용법 이 두 도구는 머신에서 실행 중인 모든 JVM 프로세스를 스캔하고, 취약할 수 있거나 취약한 프로세스에 대한 CSV 보고서를 생성합니다. 사용 세부 정보는 find-vulnerabilities/ 및...
CVE-2021-24917
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2021-24917 Run bellow command to check CVE-2021-24917 -h Configurations 2. We integrated with the Telegram A...