Skip to content

Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research

Notifications You must be signed in to change notification settings

Chocapikk/CVE-2023-46805

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

🚨 CVE-2023-46805 Scanner Tool 🛠️

A robust tool for detecting the CVE-2023-46805 vulnerability in Ivanti Pulse Connect Secure systems. This tool is inspired by the high-signal detection methods developed by AssetNote, focusing on authentication bypass vulnerabilities in these systems.

📝 Description

CVE-2023-46805 is a critical vulnerability that allows unauthorized bypass of authentication mechanisms in certain Ivanti Pulse Connect Secure versions. This tool aids in identifying affected systems, leveraging detection techniques based on AssetNote's research.

For more details on the methodology, see AssetNote's research: High-Signal Detection and Exploitation of Ivanti’s Pulse Connect Secure Auth Bypass

🚀 Features

  • Single URL Scan: Focus on a single target for quick assessment.
  • Bulk Scanning: Analyze multiple URLs from a file for widespread assessment.
  • Thread Control: Customize concurrent scanning with adjustable thread options.
  • Output Logging: Save identified potentially vulnerable URLs to a file.

📚 How to Use

  1. Install dependencies: pip install -r requirements.txt
  2. Run the tool:
    • Single URL: python scanner.py -u <URL>
    • Bulk scan: python scanner.py -f <file-path>
    • With threads: python scanner.py -f <file-path> -t <number-of-threads>
    • Save output: python scanner.py -f <file-path> -o <output-file-path>

⚠️ Disclaimer: This tool is provided for educational and ethical testing purposes only. The author is not responsible for any misuse or damage caused by this tool. Always obtain explicit permission before testing systems that you do not own or have explicit authorization to test.

About

Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages