Symfony-CVE-Scanner-PoC- — CVE-2021-21424 - CRLF Injection - CVE-2021-41268 - Host Header Injection - CVE-2022-24894 - WebProfiler abierto - CVE-2019-10909 - Directory Traversal | Kitploit

Share

Symfony Vulnerability Scanner

Automated scanning tool to detect multiple known vulnerabilities (CVE) in Symfony applications exposed to the Internet.

Developed by m10sec.

Features

🔍 Detection of multiple vulnerabilities in Symfony:
Validation of Symfony vulnerabilities
✅ Real exploitation validation (e.g.: reading /etc/passwd)
🔀 Individual or full scan option
💻 Use of socket to bypass filters in CRLF Injection
🧩 Modular and easily extendable
🧪 Passive and active detection

Requirements

Python 3.7 or higher
Libraries:
- requests
- argparse
- re
- (optional) termcolor for colored output

Installation

git clone https://github.com/moften/Symfony-CVE-Scanner-PoC-
cd Symfony-CVE-Scanner-PoC-
pip3 install -r requirements.txt
python3 main.py

---