Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-23918-Elite-Auditor — Elite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashboard intelligence. Built for Blue Teams and Security Researchers. | Kitploit
Tools/GitHubGitHub/qassam-315/cve-2026-23918-elite-auditor
ReconnaissanceVulnerability ScannersInformation GatheringWAF BypassWeb SecurityPenetration Testing
GitHubqassam-315/cve-2026-23918-elite-auditor

CVE-2026-23918-Elite-Auditor

Elite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashboard intelligence. Built for Blue Teams and Security Researchers.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
613 months agoNot yet reviewed

☣️ CVE-2026-23918-Elite-Auditor ☣️

Professional Intelligence & Reconnaissance Tool for Apache HTTP/2 Double-Free Vulnerability.

📌 Overview

CVE-2026-23918 (CVSS 8.8) is a critical memory corruption flaw in Apache HTTP Server 2.4.66. This auditor is designed to safely fingerprint targets and assess risk exposure, especially in environments where version strings are obfuscated or shielded by WAFs.

🚀 Key Features

FeatureDescription
ALPN Protocol ForcingMandates an HTTP/2 handshake to verify engine activation
WAF/Proxy BypassOptimized for direct Origin-IP auditing to bypass Cloudflare/Akamai
Risk Probability ScoringAdvanced logic to analyze hidden or "Apache-only" server headers
Neon High-Contrast UIProfessional terminal dashboard for clear intelligence reporting

🛠️ Installation

Clone the repository

root@kitploit:~
git clone https://github.com/qassam-315/CVE-2026-23918-Elite-Auditor.git

Install requirements

root@kitploit:~
pip install "httpx[http2]" rich

💻 Usage Examples

  1. Standard Domain Recon

Use this for checking standard web targets:

root@kitploit:~
python3 cve_23918_elite.py -t https://example.com
  1. Direct Origin-IP Audit (WAF Bypass)

Use this to scan the backend server directly, bypassing Cloudflare/WAF:

root@kitploit:~
python3 cve_23918_elite.py -t https://11.11.111

📊 Technical Intelligence

The tool analyzes:

  1. ALPN Negotiation – Confirms if the HTTP/2 stack is actually processing frames
  2. Latency Fingerprinting – Measures response metadata to detect proxy interference
  3. Server Signature Analysis – Cross-references headers with known vulnerable distributions

⚠️ Legal & Ethical Disclaimer

This tool is for Legal and Ethical Security Research only. It is a non-destructive scanner and does not contain any weaponized payload. The author (qassam-315) is not responsible for any misuse. Always obtain explicit authorization before testing any infrastructure.

Developed by: qassam-315 Branch: Cyber-Security Research & Intelligence Branch

Download Tool