Site icon API Security Blog

Exploit for CVE-2021-6789

image
๐Ÿ”น VulnScanner โ€“ Smart Automated Vulnerability Scanner VulnScanner is a Bash + Python hybrid tool built for Kali Linux that automates web and service vulnerability discovery, CVE enrichment, and exploitability checks. It combines well-known security tools (nmap, nikto, gobuster, searchsploit) with the NVD API (nvdlib) to generate a professional vulnerability report. โœจ Features ๐Ÿ” Network & Service Scanning Uses Nmap to fingerprint open ports, detect services, and run vulnerability scripts. ๐ŸŒ Web Vulnerability Testing Uses Nikto to scan for common web server misconfigurations and security issues. ๐Ÿ“‚ Directory Discovery Runs Gobuster against HTTP services to enumerate hidden files/folders. ๐Ÿ›ก๏ธ CVE Extraction & Enrichment Pulls CVEs from Nmap scan results, then uses NVD API (nvdlib) to fetch: CVSS base scores Severity levels (LOW, MEDIUM, HIGH, CRITICAL) CWE IDs (weakness classification) Vulnerability descriptions Suggested remediation ๐Ÿ’ฃ Exploitability Check Cross-references CVEs with ExploitDB (searchsploit) and known Metasploit modules to check if public exploits exist. ๐Ÿ“‘ Detailed Reporting Generates a structured text report including: Scanned target summary Found services and vulnerabilities CVE details sorted by severity Exploitability status (with ExploitDB/Metasploit links if found) Remediation guidance โณ Rate-limited API calls Automatically sleeps between NVD API calls to avoid rate-limit errors. ๐Ÿ›  Requirements Make sure these packages are installed: sudo apt update && sudoโ€ฆRead More

Exit mobile version