A robust tool for detecting the CVE-2023-46805 vulnerability in Ivanti Pulse Connect Secure systems. This tool is inspired by the high-signal detection methods developed by AssetNote, focusing on authentication bypass vulnerabilities in these systems.
CVE-2023-46805 is a critical vulnerability that allows unauthorized bypass of authentication mechanisms in certain Ivanti Pulse Connect Secure versions. This tool aids in identifying affected systems, leveraging detection techniques based on AssetNote's research.
For more details on the methodology, see AssetNote's research: High-Signal Detection and Exploitation of Ivanti’s Pulse Connect Secure Auth Bypass
- Single URL Scan: Focus on a single target for quick assessment.
- Bulk Scanning: Analyze multiple URLs from a file for widespread assessment.
- Thread Control: Customize concurrent scanning with adjustable thread options.
- Output Logging: Save identified potentially vulnerable URLs to a file.
- Install dependencies:
pip install -r requirements.txt
- Run the tool:
- Single URL:
python scanner.py -u <URL>
- Bulk scan:
python scanner.py -f <file-path>
- With threads:
python scanner.py -f <file-path> -t <number-of-threads>
- Save output:
python scanner.py -f <file-path> -o <output-file-path>
- Single URL: