Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
vScalation-CVE-2021-22015 — Scanner for vScalation (CVE-2021-22015) a Local Privilege Escalation in VMWare vCenter | Kitploit
Tools/GitHubGitHub/penteraio/vscalation-cve-2021-22015
Privilege EscalationVulnerability ScannersVulnerability AnalysisExploitationPenetration TestingCloud Security
GitHubpenteraio/vscalation-cve-2021-22015

vScalation-CVE-2021-22015

Scanner for vScalation (CVE-2021-22015) a Local Privilege Escalation in VMWare vCenter

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
673 years agoNot yet reviewed

vScalation (CVE-2021-22015)

Local Privilege Escalation in VMWare vCenter

  • Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems
  • Our findings were proactively reported to VMWare and were released under CVE-2021-22015
  • Patch and additional info are available on VMWare’s Advisory site

Scanner

The scanner is designed to check whether the file in question has write access to the “cis” group, and is there any user in that group that has shell access to the host.

For further explanation about CVE-2021-22015, please refer to our site here

Prerequisites

• Credentials for a Linux (PhotonOS) vCenter host

• Shell access

Usage

  1. Download the scanner to your machine
  2. Execute to following commands
root@kitploit:~
chmod 777 ./CVE-2021-22015_scanner.sh
./CVE-2021-22015_scanner.sh

Results:

  • Vulnerability found: "Host is vulnerable to CVE-2021-22015"

image

  • Vulnerability not found: "Host isn't vulnerable to CVE-2021-22015"

DISCLAIMER:

The code described in this advisory (the “Code”) is provided on an “as is” and “as available” basis and may contain bugs, errors, and other defects. You are advised to safeguard important data and to use caution. By using this Code, you agree that Pentera shall have no liability to you for any claims in connection with the Code. Pentera disclaims any and all warranties and any and all liability for any direct, indirect, incidental, punitive, exemplary, special or consequential damages, even if Pentera or its related parties are advised of the possibility of such damages. Pentera undertakes no duty to update the Code or this advisory.

Download Tool