{"uuid": "71f7fdb9-5ac0-467b-8ae4-6482cc38a370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0147", "type": "seen", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-01T20:00:48.863584Z"}