Chocapikk / CVE-2023-46805

Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research

🚨 CVE-2023-46805 Scanner Tool 🛠️

A robust tool for detecting the CVE-2023-46805 vulnerability in Ivanti Pulse Connect Secure systems. This tool is inspired by the high-signal detection methods developed by AssetNote, focusing on authentication bypass vulnerabilities in these systems.

📝 Description

CVE-2023-46805 is a critical vulnerability that allows unauthorized bypass of authentication mechanisms in certain Ivanti Pulse Connect Secure versions. This tool aids in identifying affected systems, leveraging detection techniques based on AssetNote's research.

For more details on the methodology, see AssetNote's research: High-Signal Detection and Exploitation of Ivanti’s Pulse Connect Secure Auth Bypass

🚀 Features

• Single URL Scan: Focus on a single target for quick assessment.
• Bulk Scanning: Analyze multiple URLs from a file for widespread assessment.
• Thread Control: Customize concurrent scanning with adjustable thread options.
• Output Logging: Save identified potentially vulnerable URLs to a file.

📚 How to Use

1. Install dependencies: pip install -r requirements.txt
2. Run the tool:
   • Single URL: python scanner.py -u <URL>
   • Bulk scan: python scanner.py -f <file-path>
   • With threads: python scanner.py -f <file-path> -t <number-of-threads>
   • Save output: python scanner.py -f <file-path> -o <output-file-path>

⚠️ Disclaimer: This tool is provided for educational and ethical testing purposes only. The author is not responsible for any misuse or damage caused by this tool. Always obtain explicit permission before testing systems that you do not own or have explicit authorization to test.