Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-3400-Check — Python script to check for CVE-2024-3400 vulnerability in Palo Alto Networks PAN-OS SSL VPN by probing /ssl-vpn/hipreport.esp and verifying file access via /global-protect/portal/images/sxy.txt. | Kitploit
Tools/GitHubGitHub/sxyrxyy/cve-2024-3400-check
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubsxyrxyy/cve-2024-3400-check

CVE-2024-3400-Check

Python script to check for CVE-2024-3400 vulnerability in Palo Alto Networks PAN-OS SSL VPN by probing /ssl-vpn/hipreport.esp and verifying file access via /global-protect/portal/images/sxy.txt.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Description

  1. Perform a POST request to the /ssl-vpn/hipreport.esp endpoint.
  2. Perform a GET request to /global-protect/portal/images/sxy.txt to check if the exploitation allows access to the file, which would typically be forbidden (403 Forbidden status).

Prerequisites

You need Python 3.6 or newer and aiohttp. Ensure you have the latest version of Python and pip installed.

Usage

python check.py -host 192.168.1.1

python check.py -list ips.txt

Download Tool