{"vulnerability": "cve-2017-0147", "sightings": [{"uuid": "20d71746-0a85-4c46-abf4-dce129ff1628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/591948ff-adb0-4b15-836a-72dfbce2ab96", "content": "", "creation_timestamp": "2017-05-15T08:36:10.000000Z"}, {"uuid": "f23927ea-7b13-42d9-920b-afbe19cb2c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/591dc114-7b28-4f5f-bdc5-069bac12042b", "content": "", "creation_timestamp": "2017-05-19T09:55:56.000000Z"}, {"uuid": "eef33108-8cc0-4805-b27f-1508d3fe644e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/a5e667a9-3397-4a78-9b18-ff54e18a13e6", "content": "", "creation_timestamp": "2020-10-09T16:04:24.000000Z"}, {"uuid": "be4e009f-6d37-4dd0-9bce-bee55575710a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "95525855-85b1-4e84-aabb-eb30a0f667ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47456", "content": "", "creation_timestamp": "2019-10-02T00:00:00.000000Z"}, {"uuid": "429fcf1c-dde6-4735-b871-e5cefcdcd681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43970", "content": "", "creation_timestamp": "2018-02-05T00:00:00.000000Z"}, {"uuid": "26febe27-46cc-4a8f-8f46-a4049a07b873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41891", "content": "", "creation_timestamp": "2017-04-17T00:00:00.000000Z"}, {"uuid": "77b35507-e417-4a93-86f3-e8e736d47562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971583", "content": "", "creation_timestamp": "2024-12-24T20:31:27.714729Z"}, {"uuid": "951c5066-2217-414a-ba51-1895bfbfef2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "3b8637f6-8609-4b45-a645-7b865866bf60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:51.000000Z"}, {"uuid": "07558bb8-2b11-43f4-ba92-c46c84566a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:13.000000Z"}, {"uuid": "d27e0348-5955-4e07-84f5-9eafe3faff63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_doublepulsar_rce.rb", "content": "", "creation_timestamp": "2020-02-03T20:07:28.000000Z"}, {"uuid": "6cfedf9a-c4ff-4861-8111-3dd2a6d76d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_eternalblue.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0e1041a0-03a4-4645-bd90-1ad147f83cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/smb/ms17_010_command.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5da6b35d-fe5a-405d-ada5-182adfc7417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_ms17_010.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "90bd7fe2-d608-4c4a-995a-d462f6b67502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:02.000000Z"}, {"uuid": "d1334e72-d2f5-4460-a0de-1e036d801740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_psexec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "63a88240-4518-4a0f-8eee-f709e9fdfc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/71112a57-f643-4a34-8cc9-6edbbe50ade3", "content": "", "creation_timestamp": "2026-02-02T12:27:39.463460Z"}, {"uuid": "48ceb865-48f2-497f-a864-59646c1cc6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/1258", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis", "creation_timestamp": "2022-09-28T12:10:14.000000Z"}, {"uuid": "be3729a3-ee01-4c5d-9c8d-567c4f1f38ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://t.me/alexlitreev_channel/97", "content": "[UPDATE]\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Microsoft Security Response Center \u0424\u0438\u043b\u043b\u0438\u043f \u041c\u0438\u0441\u043d\u0435\u0440 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c Shadow Brokers \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 MS17-010, MS10-061, CVE-2017-0146, CVE-2017-0147, MS14-068, MS17-010, MS09-050, MS17-010, MS08-067. \u041e\u043d\u0438 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EternalBlue, EmeraldThread, EternalChampion, EsikmoRoll, EternalRomance, EducatedScholar, EternalSynergy, EclipsedWing.\n\nhttps://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/\n\n\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c Microsoft \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 EnglishmanDentist, EsteemAudit \u0438 ExplodingCan \u043d\u0430 \u041e\u0421 Windows 7 \u0438 \u0432\u044b\u0448\u0435. \u0421\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u0442\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u2014\u00a0\u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e. \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u041c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442 \u043d\u0430\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \"customers running Windows 7 and more recent versions of Windows or Exchange 2010 and newer versions of Exchange are not at risk\". \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0439 Windows \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c Windows \u2014 \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u0441\u044c, \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0421\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432 \u041f\u0430\u043d\u0435\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Windows.\n\n\u0421\u043b\u0435\u0434\u0438\u043c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0438 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u043c\u0438 \u043a\u0430\u043a \u0438 \u043c\u0438\u0440\u043e\u0432\u043e\u0433\u043e IT-\u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430, \u0442\u0430\u043a \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u041c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442.\n\nStay tuned!", "creation_timestamp": "2017-04-15T20:19:15.000000Z"}, {"uuid": "3f468eef-6ccf-46a3-85fe-2f31a5560e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "Telegram/Jz4b2z_yBRRr2KZllpbhDcxGHChNgUgJ4Yx0aK-6ZZrOnGu1", "content": "", "creation_timestamp": "2025-02-14T10:03:10.000000Z"}, {"uuid": "1b19fafc-8290-4889-b763-7722b46f384f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "Telegram/6hdJ8N2c3RRcKB4RyTTKWJ7ur94rvSMVEFtE2Dhj_8jDKwzM", "content": "", "creation_timestamp": "2025-02-14T09:47:01.000000Z"}, {"uuid": "85e0f35b-6edd-4b86-adf2-ff1100989a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/arpsyndicate/1192", "content": "#ExploitObserverAlert\n\nCVE-2017-0147\n\nDESCRIPTION: Exploit Observer has 46 entries related to CVE-2017-0147. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka \"Windows SMB Information Disclosure Vulnerability.\"\n\nFIRST-EPSS: 0.971120000\nNVD-IS: 3.6\nNVD-ES: 2.2", "creation_timestamp": "2023-12-04T11:32:50.000000Z"}, {"uuid": "bccda923-3683-4577-9882-5d03fe900f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/arpsyndicate/1607", "content": "#ExploitObserverAlert\n\nCVE-2017-0147\n\nDESCRIPTION: Exploit Observer has 46 entries related to CVE-2017-0147. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka \"Windows SMB Information Disclosure Vulnerability.\"\n\nFIRST-EPSS: 0.971120000\nNVD-IS: 3.6\nNVD-ES: 2.2", "creation_timestamp": "2023-12-10T11:37:07.000000Z"}, {"uuid": "385eb417-6c14-44da-a0cb-af4add1e506e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-01T11:00:07.421304Z"}, {"uuid": "4776e4c5-9ea2-4502-a768-f366bdb71a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/585", "content": "#exploit\n1. CVE-2019-18922:\nDirectory Traversal in Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3\nhttps://seclists.org/fulldisclosure/2019/Nov/31\n\n2. CVE-2017-0143, CVE-2017-0144,\nCVE-2017-0145, CVE-2017-0146,\nCVE-2017-0147, CVE-2017-0148:\nSMB/RDP Doublepulsar - RCE\nhttps://packetstormsecurity.com/files/156196/smb_doublepulsar_rce.rb.txt\n]-> https://packetstormsecurity.com/files/156200/rdp_doublepulsar_rce.rb.txt", "creation_timestamp": "2024-10-15T16:10:08.000000Z"}, {"uuid": "c956e1f6-7c3a-414a-adf3-06ededd8181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-02T00:00:59.011795Z"}, {"uuid": "b8ec1fd2-e91e-4181-8485-ce0a6c51eb44", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/206480f6-f1a9-43fc-bc2a-352f2483a6e1", "content": "", "creation_timestamp": "2026-06-19T12:47:13.813404Z"}, {"uuid": "d0d36bcb-81fd-4652-add3-fec4ad167264", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3695a1e7-8ff7-4ace-bd00-377bc9fb4923", "content": "", "creation_timestamp": "2026-06-23T14:05:24.204482Z"}, {"uuid": "71f7fdb9-5ac0-467b-8ae4-6482cc38a370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-01T20:00:48.863584Z"}, {"uuid": "9e14b94e-16d5-4047-adad-5d44013a172c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-29T12:01:22.771042Z"}, {"uuid": "28aaea77-5632-4071-97b3-2147795a2762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-30T00:01:53.082066Z"}, {"uuid": "7ec22d06-f054-4179-9636-10b485aa1bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:21.807847Z"}, {"uuid": "b5aa82b8-70f8-4520-930f-a942211cca64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:22.127775Z"}, {"uuid": "cd21759e-d208-441c-b10e-f3b40cd6860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-02T01:01:10.476308Z"}, {"uuid": "8b9afb97-1c22-45ec-9db8-1c24e610d503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:37.187533Z"}, {"uuid": "0f6ebc6b-9772-4c49-ae1e-124b87263c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:37.422933Z"}, {"uuid": "92fb4f6b-3fed-4703-ab00-9d9b0278bc97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-04T05:00:05.629890Z"}, {"uuid": "05cb8a72-a54c-4a86-9a90-17761752bb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-05T01:00:39.448074Z"}, {"uuid": "6d0ebfd7-b065-42af-8b52-adb9697c230a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T07:00:04.321274Z"}, {"uuid": "a305bbd2-ea10-4337-81a2-b7216d2412de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T07:00:04.596719Z"}, {"uuid": "b5d801a0-4d43-457c-8a6b-3b299ee0ae83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:54.453621Z"}, {"uuid": "36cb7d32-0a70-4995-a729-75ce6b44e052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:54.731443Z"}, {"uuid": "5686d8bc-d7dc-4e0f-8762-d1b63d78c3c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/smb/ms17_010_command.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sleepya\", \"zerosum0x0\", \"Shadow Brokers\", \"Equation Group\"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will exploit SMB with vulnerabilities in MS17-010 to achieve a write-what-where\\n          primitive. This will then be used to overwrite the connection session information with as an\\n          Administrator session. From there, the normal psexec command execution is done.\\n\\n          Exploits a type confusion between Transaction and WriteAndX requests and a race condition in\\n          Transaction requests, as seen in the EternalRomance, EternalChampion, and EternalSynergy\\n          exploits. This exploit chain is more reliable than the EternalBlue exploit, but requires a\\n          named pipe.\", \"disclosure_date\": \"2017-03-14\", \"fullname\": \"auxiliary/admin/smb/ms17_010_command\", \"is_install_path\": true, \"mod_time\": \"2025-09-22 19:52:39 +0000\", \"name\": \"MS17-010 EternalRomance/EternalSynergy/EternalChampion SMB Remote Windows Command Execution\", \"needs_cleanup\": false, \"notes\": {\"AKA\": [\"ETERNALSYNERGY\", \"ETERNALROMANCE\", \"ETERNALCHAMPION\", \"ETERNALBLUE\"], \"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-down\"]}, \"path\": \"/modules/auxiliary/admin/smb/ms17_010_command.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/smb/ms17_010_command\", \"references\": [\"MSB-MS17-010\", \"CVE-2017-0143\", \"CVE-2017-0146\", \"CVE-2017-0147\", \"URL-https://github.com/worawit/MS17-010\", \"URL-https://hitcon.org/2017/CMT/slide-files/d2_s2_r0.pdf\", \"URL-https://blogs.technet.microsoft.com/srd/2017/06/29/eternal-champion-exploit-analysis/\", \"ATT&CK-T1021.002\"], \"rport\": 445, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:56.490371Z"}, {"uuid": "b1455d1f-2bb2-4ee3-b28e-369af61d1182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_ms17_010.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Sean Dillon \", \"Luke Jennings\"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": true, \"default_credential\": false, \"description\": \"Uses information disclosure to determine if MS17-010 has been patched or not.\\n          Specifically, it connects to the IPC$ tree and attempts a transaction on FID 0.\\n          If the status returned is \\\"STATUS_INSUFF_SERVER_RESOURCES\\\", the machine does\\n          not have the MS17-010 patch.\\n\\n          If the machine is missing the MS17-010 patch, the module will check for an\\n          existing DoublePulsar (ring 0 shellcode/malware) infection.\\n\\n          This module does not require valid SMB credentials in default server\\n          configurations. It can log on as the user \\\"\\\\\\\" and connect to IPC$.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/smb/smb_ms17_010\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"MS17-010 SMB RCE Detection\", \"needs_cleanup\": false, \"notes\": {\"AKA\": [\"DOUBLEPULSAR\", \"ETERNALBLUE\"], \"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/smb/smb_ms17_010.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/smb/smb_ms17_010\", \"references\": [\"CVE-2017-0143\", \"CVE-2017-0144\", \"CVE-2017-0145\", \"CVE-2017-0146\", \"CVE-2017-0147\", \"CVE-2017-0148\", \"MSB-MS17-010\", \"URL-https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html\", \"URL-https://github.com/countercept/doublepulsar-detection-script\", \"URL-https://web.archive.org/web/20170513050203/https://technet.microsoft.com/en-us/library/security/ms17-010.aspx\"], \"rport\": 445, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:05.956504Z"}, {"uuid": "692d8acc-4204-4f40-aa63-70f6c7c4e635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_psexec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"sleepya\", \"zerosum0x0\", \"Shadow Brokers\", \"Equation Group\"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": true, \"default_credential\": false, \"description\": \"This module will exploit SMB with vulnerabilities in MS17-010 to achieve a write-what-where\\n          primitive. This will then be used to overwrite the connection session information with as an\\n          Administrator session. From there, the normal psexec payload code execution is done.\\n\\n          Exploits a type confusion between Transaction and WriteAndX requests and a race condition in\\n          Transaction requests, as seen in the EternalRomance, EternalChampion, and EternalSynergy\\n          exploits. This exploit chain is more reliable than the EternalBlue exploit, but requires a\\n          named pipe.\", \"disclosure_date\": \"2017-03-14\", \"fullname\": \"exploit/windows/smb/ms17_010_psexec\", \"is_install_path\": true, \"mod_time\": \"2026-02-02 12:03:17 +0000\", \"name\": \"MS17-010 EternalRomance/EternalSynergy/EternalChampion SMB Remote Windows Code Execution\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"ETERNALSYNERGY\", \"ETERNALROMANCE\", \"ETERNALCHAMPION\", \"ETERNALBLUE\"], \"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smb/ms17_010_psexec.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"windows/smb/ms17_010_psexec\", \"references\": [\"MSB-MS17-010\", \"CVE-2017-0143\", \"CVE-2017-0146\", \"CVE-2017-0147\", \"URL-https://github.com/worawit/MS17-010\", \"URL-https://hitcon.org/2017/CMT/slide-files/d2_s2_r0.pdf\", \"URL-https://blogs.technet.microsoft.com/srd/2017/06/29/eternal-champion-exploit-analysis/\", \"ATT&CK-T1021.002\", \"ATT&CK-T1059\", \"ATT&CK-T1059.001\", \"ATT&CK-T1569.002\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Automatic\", \"PowerShell\", \"Native upload\", \"MOF upload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:33.547218Z"}, {"uuid": "f496243f-a9c1-416a-b816-608f9e24e7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_eternalblue.rb", "content": "{\"aliases\": [\"exploit/windows/smb/ms17_010_eternalblue_win8\"], \"arch\": \"x64\", \"author\": [\"Equation Group\", \"Shadow Brokers\", \"sleepya\", \"Sean Dillon \", \"Dylan Davis \", \"thelightcosine\", \"wvu \", \"agalway-r7\", \"cdelafuente-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module is a port of the Equation Group ETERNALBLUE exploit, part of\\n          the FuzzBunch toolkit released by Shadow Brokers.\\n\\n          There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size\\n          is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a\\n          DWORD is subtracted into a WORD. The kernel pool is groomed so that overflow\\n          is well laid-out to overwrite an SMBv1 buffer. Actual RIP hijack is later\\n          completed in srvnet!SrvNetWskReceiveComplete.\\n\\n          This exploit, like the original may not trigger 100% of the time, and should be\\n          run continuously until triggered. It seems like the pool will get hot streaks\\n          and need a cool down period before the shells rain in again.\\n\\n          The module will attempt to use Anonymous login, by default, to authenticate to perform the\\n          exploit. If the user supplies credentials in the SMBUser, SMBPass, and SMBDomain options it will use\\n          those instead.\\n\\n          On some systems, this module may cause system instability and crashes, such as a BSOD or\\n          a reboot. This may be more likely with some payloads.\", \"disclosure_date\": \"2017-03-14\", \"fullname\": \"exploit/windows/smb/ms17_010_eternalblue\", \"is_install_path\": true, \"mod_time\": \"2025-06-06 12:39:33 +0000\", \"name\": \"MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"ETERNALBLUE\"], \"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smb/ms17_010_eternalblue.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/smb/ms17_010_eternalblue\", \"references\": [\"MSB-MS17-010\", \"CVE-2017-0143\", \"CVE-2017-0144\", \"CVE-2017-0145\", \"CVE-2017-0146\", \"CVE-2017-0147\", \"CVE-2017-0148\", \"URL-https://github.com/RiskSense-Ops/MS17-010\", \"URL-https://risksense.com/wp-content/uploads/2018/05/White-Paper_Eternal-Blue.pdf\", \"EDB-42030\", \"ATT&CK-T1059\", \"ATT&CK-T1068\", \"ATT&CK-T1210\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Automatic Target\", \"Windows 7\", \"Windows Embedded Standard 7\", \"Windows Server 2008 R2\", \"Windows 8\", \"Windows 8.1\", \"Windows Server 2012\", \"Windows 10 Pro\", \"Windows 10 Enterprise Evaluation\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:33.206850Z"}, {"uuid": "2161c6ef-cf16-47db-b649-f2e4587167ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_doublepulsar_rce.rb", "content": "{\"aliases\": [\"exploit/windows/smb/doublepulsar_rce\"], \"arch\": \"x64\", \"author\": [\"Equation Group\", \"Shadow Brokers\", \"zerosum0x0\", \"Luke Jennings\", \"wvu \", \"Jacob Robles\"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": true, \"default_credential\": false, \"description\": \"This module executes a Metasploit payload against the Equation Group's\\n          DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE.\\n\\n          While this module primarily performs code execution against the implant,\\n          the \\\"Neutralize implant\\\" target allows you to disable the implant.\", \"disclosure_date\": \"2017-04-14\", \"fullname\": \"exploit/windows/smb/smb_doublepulsar_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"SMB DOUBLEPULSAR Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"DOUBLEPULSAR\"], \"RelatedModules\": [\"auxiliary/scanner/smb/smb_ms17_010\", \"exploit/windows/smb/ms17_010_eternalblue\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-os-down\"]}, \"path\": \"/modules/exploits/windows/smb/smb_doublepulsar_rce.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/smb/smb_doublepulsar_rce\", \"references\": [\"MSB-MS17-010\", \"CVE-2017-0143\", \"CVE-2017-0144\", \"CVE-2017-0145\", \"CVE-2017-0146\", \"CVE-2017-0147\", \"CVE-2017-0148\", \"URL-https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html\", \"URL-https://countercept.com/blog/analyzing-the-doublepulsar-kernel-dll-injection-technique/\", \"URL-https://www.countercept.com/blog/doublepulsar-usermode-analysis-generic-reflective-dll-loader/\", \"URL-https://github.com/countercept/doublepulsar-detection-script\", \"URL-https://github.com/countercept/doublepulsar-c2-traffic-decryptor\", \"URL-https://gist.github.com/msuiche/50a36710ee59709d8c76fa50fc987be1\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Execute payload (x64)\", \"Neutralize implant\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:34.131994Z"}]}