Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Abyssal — Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive detection. | Kitploit
Tools/GitHubGitHub/stoerti2/abyssal
Vulnerability ScannersExploitationWeb Application ExploitationNetwork SecurityPenetration TestingRed Teaming
GitHubstoerti2/abyssal

Abyssal

Abyssal is a high-performance Telnet vulnerability scanner for CVE-2026-24061, delivering root shells on vulnerable systems with false-positive detection.

View Repository
11 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🔥 Abyssal

CVE-2026-24061 Telnet Vulnerability Scanner & Exploit

From the depths, we rise.
Multi-threaded, false-positive detection, interactive root shell on success.


👨‍💻 About the Author

This project was built by an experienced IT professional with decades of hands-on work in network security, infrastructure, and software development. At 55, I am actively seeking new opportunities—whether as a full-time employee, freelancer, or project collaborator. If you value experience, deep technical knowledge, and a no-nonsense approach to problem-solving, let's connect.

📫 I am open to job offers worldwide.

✉️ Contact: [[email protected]]


⚡ Features

  • 🚀 Multi-threaded scanning — Scan hundreds of targets in parallel
  • 🎯 CVE-2026-24061 exploitation — Weaponized exploit for GNU InetUtils Telnetd
  • 🛡️ False-positive detection — Verifies real interactive connections
  • 💻 Interactive root shell — Direct shell access on vulnerable systems
  • 📊 Detailed logging — Comprehensive results with timestamps
  • 📁 Results export — Automatic saving of vulnerable targets
  • 🌐 IPv4 & CIDR support — Scan single IPs or entire subnets

🚀 Installation

Clone the repository

📖 Usage

Basic Scan (Non-Interactive)

root@kitploit:~
python3 abyssal.py -f targets.txt

Interactive Mode (Get Shell on Success)

root@kitploit:~
python3 abyssal.py -f targets.txt --interactive

Advanced Options

root@kitploit:~
python3 abyssal.py -f targets.txt -t 20 --interactive -o scan.log

Command Line Options

Option Description

-f, --file File with IP addresses (default: ip_list.txt)

-t, --threads Number of parallel threads (default: 10)

-i, --interactive Interactive mode — get shell on vulnerable systems

-o, --output Log file name (auto-generated if not specified)

-c, --connect-timeout Connection timeout in seconds (default: 5)

-s, --session-timeout Session timeout in seconds (default: 10)

--version Show version information

-h, --help Show help message

📂 Target File Format Create a file with one target per line:

root@kitploit:~
# Single IPs
192.168.1.100
10.0.0.50

# IP with custom port
192.168.1.200:2323

# Subnet (CIDR) — support coming soon
# 192.168.1.0/24

# Comments are allowed
172.16.1.25  # Office server

📊 Example Output

root@kitploit:~
╔═══════════════════════════════════════════════════════════════════════════════╗
║                                                                               ║
║   █████╗ ██████╗ ██╗   ██╗███████╗███████╗ █████╗ ██╗                         ║
║  ██╔══██╗██╔══██╗╚██╗ ██╔╝██╔════╝██╔════╝██╔══██╗██║                         ║
║  ███████║██████╔╝ ╚████╔╝ ███████╗███████╗███████║██║                         ║
║  ██╔══██║██╔══██╗  ╚██╔╝  ╚════██║╚════██║██╔══██║██║                         ║
║  ██║  ██║██████╔╝   ██║   ███████║███████║██║  ██║███████╗                    ║
║  ╚═╝  ╚═╝╚═════╝    ╚═╝   ╚══════╝╚══════╝╚═╝  ╚═╝╚══════╝                    ║
║                                                                               ║
║  Abyssal - CVE-2026-24061 Telnet Vulnerability Scanner                        ║
║  "From the depths, we rise."                                                  ║
║                                                                               ║
║  Built by: Klaus Baumdick                                                     ║
║  Contact:  [email protected]                                            ║
║  Status:   Open for new opportunities worldwide                               ║
║                                                                               ║
╚═══════════════════════════════════════════════════════════════════════════════╝

⚠️  INTERACTIVE MODE ENABLED!
   On REAL login prompt or shell, control will be passed to you.
   False positives are automatically detected and ignored.
   Press CTRL+C to abort.

Starting scan with 10 parallel threads
Total: 100 targets to test
============================================================

🎯 REAL ROOT SHELL (#) ON 192.168.1.100:23 OBTAINED!
============================================================
>>> You now have shell access!
>>> Execute any commands (whoami, id, ls, etc.)
>>> Type 'exit' or press CTRL+C to close
------------------------------------------------------------

# whoami
root
# id
uid=0(root) gid=0(root) groups=0(root)
# exit

[*] Session on 192.168.1.100:23 closed.

============================================================
SCAN COMPLETED
============================================================
Duration: 45.23 seconds
Targets tested: 100

📊 SUMMARY:
  ✅ REAL VULNERABLE:  15
  🔒 PROTECTED:        42
  ❓ FAILED:           23
  🌐 UNREACHABLE:      20
  ⚠️  FALSE POSITIVES:  0

🚨 SECURITY WARNING:
  15 system(s) are REALLY vulnerable to CVE-2026-24061!
  → Disable or patch Telnet immediately!
  → Use SSH as a secure alternative!

⚠️ Disclaimer
This tool is for authorized security testing and educational purposes only.

Only use on systems you own or have explicit written permission to test

Unauthorized access to computer systems is illegal

The author assumes no responsibility for misuse of this tool

Use responsibly and at your own risk

📝 License

This project is licensed under the MIT License — see the LICENSE file for details.

🤝 Connect

Klaus Baumdick 📫 Email: [email protected]

🔗 GitHub: github.com/stoerti2

📌 Status: Open for new opportunities worldwide

📚 References

CVE-2026-24061

GNU InetUtils Telnetd Vulnerability

git clone https://github.com/stoerti2/abyssal.git


root@kitploit:~
#┌────────────────────────────────────────────────────────────────────────┐
#│                                                                        │
#│         ███████╗████████╗ ██████╗ ███████╗██████╗ ████████╗██╗         │
#│         ██╔════╝╚══██╔══╝██╔═══██╗██╔════╝██╔══██╗╚══██╔══╝██║         │
#│         ███████╗   ██║   ██║   ██║█████╗  ██████╔╝   ██║   ██║         │
#│         ╚════██║   ██║   ██║   ██║██╔══╝  ██╔══██╗   ██║   ██║         │
#│         ███████║   ██║   ╚██████╔╝███████╗██║  ██║   ██║   ██║         │
#│         ╚══════╝   ╚═╝    ╚═════╝ ╚══════╝╚═╝  ╚═╝   ╚═╝   ╚═╝         │
#│                                                                        │
#│                       "old school, still root"                         │
#│                    "stoerti - the jobless hacker"                      │
#│                                                                        │
#│    ┌──────────────────────────────────────────────────────────────┐    │
#│    │  40 years in the trenches.     │  6 months unemployed in DE. │    │
#│    │  They fired the one who knew.  │  This is my legacy.         │    │
#│    │                   -- no patches for reality --               │    │
#│    └──────────────────────────────────────────────────────────────┘    │
#│                                                                        │
#└────────────────────────────────────────────────────────────────────────┘

This is Grindware

What is Grindware?

Grindware is software that exists because nobody pays me to build the things that actually matter.

I've been unemployed for six months. Not because I can't code – but because the market doesn't care about skills anymore. It cares about buzzwords, certificates, and who you know. So instead of waiting for a job that never comes, I build.

Grindware is the result of that.

The Philosophy Grindware is:

Built out of necessity – not for profit, not for investors, not for a product roadmap. Built because something needed to exist and nobody else was going to build it.

Released for free – because locking code behind a paywall feels wrong when you know what it's like to have nothing.

Honest – no marketing fluff, no "enterprise-grade" nonsense. Just code that works.

Unpolished but functional – it gets the job done. If you need a pretty UI, go somewhere else.

Why "Grindware"?

Because that's what it is. Code written during the grind. During the late nights. During the 47th job rejection. During the moments when you realize that the system doesn't care about you, so you might as well build your own.

Grindware is survival code.

Who is Grindware for?

Developers who are tired of corporate BS

Security researchers who need tools that actually work

Anyone who believes software should be useful, not just profitable

People who are also grinding

What Grindware is NOT

Not a company

Not a startup

Not a product

Not for sale

Grindware is just code. From one unemployed developer to the world.

Support Grindware

If you use Grindware, that's enough. If you want to support it, you can:

⭐ Star the repository

🐛 Report bugs

🔧 Contribute code

💬 Share it with someone who might need it

Contact

I'm always open to work. If you need a developer who actually builds things, let's talk.

Grindware – Built in the grind, released for free.

📬 Contact

For questions or inquiries regarding this dataset, please contact [email protected]


Last Updated: July 2026

Download Tool