Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
telerik-scanner-cve-2017-9248 — Telerik CVE-2017-9248 Vulnerability Scanner | Kitploit
Tools/GitHubGitHub/0xsharz/telerik-scanner-cve-2017-9248
Vulnerability ScannersExploitationWeb Application ExploitationInformation GatheringWeb SecurityPenetration Testing
GitHub0xsharz/telerik-scanner-cve-2017-9248

telerik-scanner-cve-2017-9248

Telerik CVE-2017-9248 Vulnerability Scanner

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Telerik CVE-2017-9248 Vulnerability Scanner V2.0

A comprehensive Python scanner that discovers Telerik endpoints and tests for CVE-2017-9248 cryptographic vulnerability with enterprise-grade bulk scanning capabilities.

Features

  • Quick & Discovery Modes: Single path testing or comprehensive discovery (50+ paths)
  • Bulk Scanning: Scan multiple targets from a file automatically
  • Multi-threaded: Fast concurrent endpoint enumeration
  • Version Detection: Identifies specific Telerik versions
  • Proxy Support: Works with Burp Suite and other tools
  • CSV/JSON Output: Professional reporting and automation support
  • Progress Tracking: Real-time updates during bulk operations
  • Output Management: Custom directories and timestamped files

Installation

root@kitploit:~
git clone https://github.com/yourusername/telerik-scanner.git
cd telerik-scanner
pip install requests

Usage

Single Target Scanning

Quick Mode (Default)

root@kitploit:~
python3 telerik.py -u https://target.com

Custom Path

root@kitploit:~
python3 telerik.py -u https://target.com --path /admin/Telerik.Web.UI.DialogHandler.aspx

Discovery Mode

root@kitploit:~
python3 telerik.py -u https://target.com -d

With Proxy

root@kitploit:~
python3 telerik.py -u https://target.com -d -p 127.0.0.1:8080

Save Results to CSV/JSON

root@kitploit:~
python3 telerik.py -u https://target.com -d --csv results.csv
python3 telerik.py -u https://target.com -d --json results.json
python3 telerik.py -u https://target.com -d --csv results.csv --output-dir ./reports/

Bulk Scanning

Scan Multiple Targets from File

root@kitploit:~
python3 telerik.py -f urls.txt -d

Bulk Scan with Custom Thread Count

root@kitploit:~
python3 telerik.py -f urls.txt -d -t 20

Bulk Scan with Output Files

root@kitploit:~
python3 telerik.py -f urls.txt -d --csv bulk_results.csv --json bulk_results.json

Quick Bulk Scan (DialogHandler Only)

root@kitploit:~
python3 telerik.py -f urls.txt --csv quick_results.csv

URL File Format

Create a text file with one URL per line:

root@kitploit:~
# Sample URLs file
# Lines starting with # are comments
https://example.com
https://test.example.com
https://demo.example.com
https://staging.example.com

Arguments

FlagDescriptionDefault
-u, --urlTarget URL for single target scanning-
-f, --fileFile containing URLs for bulk scanning-
-d, --discoverEnable comprehensive path discoveryFalse
--pathSpecific path to test/Telerik.Web.UI.DialogHandler.aspx
-p, --proxyProxy server-
-t, --threadsThread count for discovery10
--csvSave results to CSV file-
--jsonSave results to JSON file-
--output-dirOutput directory for resultsCurrent directory

Output Formats

CSV Output

The CSV file contains detailed information for each endpoint:

  • Target URL
  • Endpoints Found
  • Vulnerable Endpoints
  • Scan Status
  • Endpoint URL
  • Vulnerable (Yes/No)
  • Version
  • Error Message

JSON Output

The JSON file contains structured data with all scan details:

root@kitploit:~
[
  {
    "target_url": "https://example.com",
    "endpoints_found": 3,
    "vulnerable_endpoints": 1,
    "scan_status": "Completed",
    "details": [
      {
        "url": "https://example.com/Telerik.Web.UI.DialogHandler.aspx",
        "vulnerable": true,
        "error_message": "Index was outside the bounds of the array.",
        "version": "2017.2.711"
      }
    ]
  }
]

Console Output

The scanner provides real-time progress updates and comprehensive summary tables:

root@kitploit:~
=====================================
BULK SCAN RESULTS SUMMARY
=====================================
Total Targets Scanned: 5
Successful Scans: 4
Failed Scans: 1
Total Endpoints Found: 12
Total Vulnerable Endpoints: 2

----------------------------------------------------
Target URL                                    Endpoints  Vulnerable  Status
----------------------------------------------------
https://example.com                           3          1           Completed
https://test.example.com                      2          0           Completed
https://demo.example.com                      0          0           No endpoints found
https://staging.example.com                   4          1           Completed
https://dev.example.com                       3          0           Completed
----------------------------------------------------

CVE-2017-9248 Details

  • CVSS: 9.8 (Critical)
  • Affected: Versions prior to 2017.2.621
  • Impact: Cryptographic compromise, file access, potential RCE

Common Paths Tested

root@kitploit:~
/Telerik.Web.UI.DialogHandler.aspx
/telerik/Telerik.Web.UI.DialogHandler.aspx
/admin/Telerik.Web.UI.DialogHandler.aspx
/cms/Telerik.Web.UI.DialogHandler.aspx
/Telerik.Web.UI.SpellCheckHandler.axd
/Telerik.Web.UI.WebResource.axd
/Telerik.ReportViewer.axd
/RadControls/
/aspnet_client/system_web/4_0_30319/RadControls/

Example Output

Single Target

root@kitploit:~
[*] Testing specific path: https://target.com/Telerik.Web.UI.DialogHandler.aspx
[+] VULNERABLE TO CVE-2017-9248!
[+] Error message: Index was outside the bounds of the array.
[+] Detected version: 2016.2.504

Bulk Scan

root@kitploit:~
[*] Starting bulk scan of URLs from: urls.txt
[*] Discovery mode: Enabled
[*] Threads per target: 10
[*] Loaded 5 URLs for scanning

============================================================
SCANNING TARGET 1/5: https://example.com
============================================================
[+] Found: https://example.com/Telerik.Web.UI.DialogHandler.aspx (Status: 200)
[+] VULNERABLE TO CVE-2017-9248!
[+] Error message: Index was outside the bounds of the array.
[+] Detected version: 2016.2.504

Vulnerability Detection

The scanner uses multiple techniques to detect CVE-2017-9248:

  1. Error-based Oracle: Sends malformed payloads to trigger specific error messages
  2. Response Analysis: Looks for characteristic .NET error messages
  3. Version Detection: Attempts to identify vulnerable Telerik versions
  4. Endpoint Validation: Confirms endpoints are actually Telerik controls

Security Recommendations

If vulnerabilities are found:

  1. Immediate Action: Update Telerik controls to the latest version
  2. Access Control: Review and restrict access to Telerik endpoints
  3. Monitoring: Implement logging and monitoring for exploitation attempts
  4. WAF Rules: Consider Web Application Firewall rules for additional protection

Examples

Quick Vulnerability Check

root@kitploit:~
python3 telerik.py -u https://target.com

Comprehensive Security Audit

root@kitploit:~
python3 telerik.py -f targets.txt -d -t 20 --csv audit_results.csv --json audit_results.json

Proxy-based Scanning

root@kitploit:~
python3 telerik.py -f targets.txt -d -p 127.0.0.1:8080 --csv proxy_results.csv

Notes

  • The scanner automatically adds https:// if no protocol is specified
  • Use -d/--discover for comprehensive endpoint discovery
  • Bulk scanning creates timestamped output files by default
  • The scanner handles network errors gracefully and continues with remaining targets
  • All results are saved with UTF-8 encoding for international character support

Disclaimer

For authorized testing only. Users responsible for proper authorization.

References

  • CVE-2017-9248
  • Original Research
Download Tool