+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW (/showthread.php?tid=6325349)
CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - indirectsyscall - May 13, 2026
🔒 Automated Cpanel CVE Scanner + Payload Delivery
This tool scans IP ranges for CVE-2026-41940 - cPanel & WHM as well as looking for misconfigured laravel setups to grab .env
Once a vulnerability is found your .html landing page + antibot is automatically uploaded to their root.
Displayed in-front of the hosts main domain.
Comes with everything pre setup, just swap out the ClickFix direct download link with your own.
If you're looking for a easy, passive way to spread your malware this is it.
Key Features:
• Automated landing page upload
• Automated antibot upload
• Passive spreading of your landing page / malware
• Comes with Cloudflare ClickFix
• Come with source code
• Automated .env scanning
• SMTP & database extraction
Note - 1/3 copies sold, $500 per
HF MM welcomed.
https://t.me/indirectsyscall
[contract=tid]Start Contract[/contract]
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - loadman - May 13, 2026
https://securityaffairs.com/192013/cyber-crime/attackers-exploit-cpanel-cve-2026-41940-to-deploy-filemanager-backdoor.html
nice
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - indirectsyscall - May 16, 2026
This is a bump
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - Cap - May 16, 2026
(May 16, 2026 12:47 AM)indirectsyscall Wrote: This is a bump
Please don’t low quality post to bump your threads.
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - socks4 - May 23, 2026
OP reached out to me to see if I was interested in a vouch copy to review the program, and give my feedback and thoughts on it.
I was given a zip file containing all the needed files and any questions I had were answered quickly and given good explanation. Setup was easy, OP recommended a deployment site but I opted to host it myself.
The product itself works flawlessly, with the caveat of the wordpress module, which is currently broken but OP has said they're working on resolving issues in it. The other modules such as the .env scanner and page deployment worked as described.
![[Image: image.png]](https://i.ibb.co/FQdqX0k/image.png)
I would recommend this for people looking to spread via clickfix, or users looking to work off data given by exposed .env files such as AWS tokens or SMTP's. I think for the utility it offers it's price is suitable, I wish OP the best of luck with sales
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - A$APKING - May 23, 2026
(May 23, 2026 10:40 AM)socks4secure Wrote: OP reached out to me to see if I was interested in a vouch copy to review the program, and give my feedback and thoughts on it.
I was given a zip file containing all the needed files and any questions I had were answered quickly and given good explanation. Setup was easy, OP recommended a deployment site but I opted to host it myself.
The product itself works flawlessly, with the caveat of the wordpress module, which is currently broken but OP has said they're working on resolving issues in it. The other modules such as the .env scanner and page deployment worked as described.
I would recommend this for people looking to spread via clickfix, or users looking to work off data given by exposed .env files such as AWS tokens or SMTP's. I think for the utility it offers it's price is suitable, I wish OP the best of luck with sales
How long for that scan results.
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - socks4 - May 23, 2026
(May 23, 2026 12:31 PM)A$APKING Wrote: How long for that scan results.
the port scan itself was acceptable, there is a hardcoded limit of 500 workers for the scanning of vulnerable or exposed endpoints, however if the package is provided the same way as it was for me, you could easily modify it yourself to be higher.
network speed naturally plays a factor into it, if you ran this on a 10g port, it would be considerably faster
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - Money- - May 23, 2026
(May 23, 2026 01:57 PM)socks4secure Wrote: the port scan itself was acceptable, there is a hardcoded limit of 500 workers for the scanning of vulnerable or exposed endpoints, however if the package is provided the same way as it was for me, you could easily modify it yourself to be higher.
network speed naturally plays a factor into it, if you ran this on a 10g port, it would be considerably faster
Can input ur own IP range lists and all right? Into the whatever web panel/dashboard/platform.
RE: CPANEL CVE SCANNER AUTOMATED CLICKFIX GET BOTS NOW - socks4 - May 24, 2026
(May 23, 2026 09:52 PM)Money- Wrote: Can input ur own IP range lists and all right? Into the whatever web panel/dashboard/platform.
yes, the program can handle both ip ranges and ASN numbers perfectly fine, so you can target whatever you want. It does not do web scanning by itself to find the endpoints, you have to put them in yourself but frankly it's not hard to find ranges or ASN numbers so it's no bother
BUMP - Stanley - Aug 7, 2026
I'm Stanley HF's helper bot. The OP (original poster) of this thread wants everyone to see this page and has elected to bump it to the top of the showthread listing. Since HF doesn't want a ton of LQP (Low Quality Posts) this is the best method of bumping your content. There is a small βyte fee for each bump. Any OP can bump any of their threads on HF from the linked icon on the top of their first post.
If you haven't already read the first post of this thread we encourage you to do so.
Thanks,
Stanley