Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/appliedi/telerik_cve-2019-18935
ReconnaissanceVulnerability ScannersNetwork MappingExploitationWeb Application ExploitationPenetration Testing
GitHubappliedi/telerik_cve-2019-18935

Telerik_CVE-2019-18935

TelerikUI Vulnerability Scanner (CVE-2019-18935)

View Repository
6 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Telerik_CVE-2019-18935 — TelerikUI Vulnerability Scanner (CVE-2019-18935) | Kitploit

TelerikUI Python Scanner

(telerik_rce_scan.py)

Examples

Assess an IP for CVE-2019-18935
$ python3 telerik_rce_scan.py -t 192.168.44.21

Assess a hostname for CVE-2019-18935
$ python3 telerik_rce_scan.py -t vulnerable.telerik.net

Assess a CIDR network range for CVE-2019-18935
$ python3 telerik_rce_scan.py -r 23.253.4.0/24

Assess a list of targerts
$ python3 telerik_rce_scan.py -iL hosts.txt

TelerikUI NSE Scanner

(http-telerik-vuln.nse)

Installation

Download to your nmap scripts directory (/usr/share/nmap/scripts/)

Update the nmap scripts database

$ nmap --script-updatedb

Sample execution:

nmap -sT -p443 --script=http-telerik-vuln 23.253.4.115

Screen:

Thanks

@mwulftange initially discovered this vulnerability. @bao7uo wrote all of the logic for breaking RadAsyncUpload encryption, which enabled manipulating the file upload configuration object in rauPostData and subsequently exploiting insecure deserialization of that object. And thanks to Noperator (@BishopFox) from whom I copped this language and the Legal Disclaimer below.

Legal Disclaimer

Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Download Tool