Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE — bash script for automated discovery and exploitation of machines with the CVE-2022-39986 vulnerability | Kitploit
Tools/GitHubGitHub/mind2hex/cve-2022-39986-raspap-2.8.0-2.8.7-rce
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringLearning & Education
GitHubmind2hex/cve-2022-39986-raspap-2.8.0-2.8.7-rce

CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE

bash script for automated discovery and exploitation of machines with the CVE-2022-39986 vulnerability

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2 years agoNot yet reviewed

RaspAP Hunter

RaspAP Hunter is a Bash script designed to scan for RaspAP installations and test them for a specific vulnerability CVE-2022-39986.

root@kitploit:~
    ____                       ___     ____ 
   / __ \ ____ _ _____ ____   /   |   / __ \
  / /_/ // __ `// ___// __ \ / /| |  / /_/ /
 / _, _// /_/ /(__  )/ /_/ // ___ | / ____/ 
/_/ |_| \__,_//____// .___//_/  |_|/_/      
    __  __         /_/   __                    author: mind2hex
   / / / /__  __ ____   / /_ ___   _____    
  / /_/ // / / // __ \ / __// _ \ / ___/    
 / __  // /_/ // / / // /_ /  __// /        
/_/ /_/ \__,_//_/ /_/ \__/ \___//_/         
                                                         c=====e
   ____________                                         _,,_H__
  (__((__((___()    CVE-2022-39986                     //|     |
 (__((__((___()()_____________________________________// |ACME |
(__((__((___()()()------------------------------------/  |_____|

Features

  1. Requirements Checking: Checks for necessary dependencies and provides instructions for installation if missing.
  2. Shodan Integration: Downloads and parses target IP addresses with RaspAP from Shodan.
  3. Vulnerability Scanning: Scans for the specific CVE and provides feedback on vulnerable IPs.
  4. Reverse Shell Spawning: Allows the user to spawn a reverse shell on a vulnerable target.

Prerequisites

  • shodan
  • jq
  • python
  • ngrok
  • terminator

Usage

  1. Clone this repository or download the script raspap_hunter.sh.

  2. Make the script executable:

    root@kitploit:~
    chmod +x raspap_hunter.sh

  3. Run the script:

    root@kitploit:~
    ./raspap_hunter.sh

Notes

  • Ensure that php-reverse-shell.php is available in the working directory or it will be downloaded from the provided URL.
  • Make sure to configure Shodan with your API key.
  • Follow the instructions if missing dependencies.

Author

mind2hex

Disclaimer

This script is for educational and research purposes only. Do not use this against any systems without explicit permission.

License

Please see the license file in the repository.

Download Tool