Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cosmicsting-validator — CosmicSting (CVE-2024-34102) POC / Patch Validator | Kitploit
Tools/GitHubGitHub/samjuk/cosmicsting-validator
Vulnerability ScannersExploitationWeb SecurityPenetration TestingDevSecOpsMisconfiguration
GitHubsamjuk/cosmicsting-validator

cosmicsting-validator

CosmicSting (CVE-2024-34102) POC / Patch Validator

View Repository
11 month agoNot yet reviewed
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch.

This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list.

https://www.sdj.pw/posts/magento2-cosmic-sting-check/

Online Validator https://cosmicsting.samdjames.uk/

Setup

root@kitploit:~
# Create a python virtual environment for the project
python -m venv venv

# Activate virtual environment (pick appropriate below)
source venv/bin/activate # MacOS / Unix
venv\Scripts\activate    # Windows

# Install Requirements
pip install -r requirements.txt

Usage

root@kitploit:~
# Run the POC against a single store
./poc.py -u https://samdjames.uk

# To run the POC against multiple stores, first create txt file containing the list of sites seperated by a new line
# for example `sites/example.txt`. And pass it as the first positional argument of the ./z_validate script.
./z_validate sites/example.txt

# A very basic check monitoring stores for compromise
# Dumps all script src's to a file, and compares against the previous run.
./z_compromise_check sites/example.txt
Download Tool