Back Sploitus

SearchOrg exploit

Sploitus • September 17, 2026

Share: View original

Вводя домен электронной почты компании, вы получаете информацию с помощью DNS, NMAP и Shodan

* На машине должен быть установлен NMAP, чтобы можно было использовать команду

* Необходимо иметь учетную запись Shodan и загрузить APIKey туда, где это указано в скрипте

* Настройте необходимые библиотеки, перечисленные в requirements.txt

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Emerging Exploits: KittyStager and SearchOrg Tools Two new exploits, KittyStager and SearchOrg, have been reported on September 17, 2026. KittyStager is a zero-stage command and control (C2) tool designed for stealthy payload deployment and information gathering, lacking command execution capabilities. It includes a client and API for task management and is intended for educational purposes. SearchOrg allows users to gather information about a company's email domain using DNS, NMAP, and Shodan, requiring specific tools and API access. Both tools highlight the increasing sophistication of cyber threats and the need for organizations to remain vigilant. The current status of these exploits is not fully clear, as they are newly introduced without confirmed widespread exploitation. 2 sources 34

Extracted Entities

MITRE ATT&CK (1)

T1046 - Network Service Discovery

Tools (2)