Skip to content
KitploitKITPLOIT
工具博客
提交
工具博客
提交

黑客、渗透测试和网络安全工具,武装您的安全武器库!

Kitploit 是一个黑客、网络安全和渗透测试工具的目录。发现最新的项目更新,查找漏洞、分析系统、自动化测试并加强你的安全。

··订阅源·联系·隐私·© 2026 Kitploit

工具目录

分类

查看所有分类
Loading categories
cosmicsting-validator — CosmicSting (CVE-2024-34102) POC / Patch Validator | Kitploit
工具/GitHubGitHub/samjuk/cosmicsting-validator
Vulnerability ScannersExploitationWeb SecurityPenetration TestingDevSecOpsMisconfiguration
GitHubsamjuk/cosmicsting-validator

cosmicsting-validator

CosmicSting (CVE-2024-34102) POC / Patch Validator

查看仓库
1个月前尚未审核

最受欢迎

查看全部 →

发现我们社区最常用的工具。

探索所有工具

浏览我们的工具集合

查看所有工具 →
分享
网站

一个 Cosmicsting POC,附带一个 bash 脚本,用于检查我们所有托管的站点以确认补丁已应用。

此仓库用于帮助商店所有者/托管方确认补丁已应用到商店。在 check.bash 中,将域名添加到 SITES 列表。

https://www.sdj.pw/posts/magento2-cosmic-sting-check/

在线验证器 https://cosmicsting.samdjames.uk/

安装

root@kitploit:~
# Create a python virtual environment for the project
python -m venv venv

# Activate virtual environment (pick appropriate below)
source venv/bin/activate # MacOS / Unix
venv\Scripts\activate    # Windows

# Install Requirements
pip install -r requirements.txt

使用

root@kitploit:~
# Run the POC against a single store
./poc.py -u https://samdjames.uk

# To run the POC against multiple stores, first create txt file containing the list of sites seperated by a new line
# for example `sites/example.txt`. And pass it as the first positional argument of the ./z_validate script.
./z_validate sites/example.txt

# A very basic check monitoring stores for compromise
# Dumps all script src's to a file, and compares against the previous run.
./z_compromise_check sites/example.txt
下载工具