CVE-2017-7269-Echo-PoC

CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...

CVE-2026-85254

CVE-2026-85254 — camel-platform-http: request-header echo suppression bypass header-name case Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the guard that stops a request header being reflected into the response compared header names case-sensitively , while HTTP...

cve-2021-44228-helpers

CVE-2021-44228 Helpers Helpers, examples, and exploits for cve-2021-44228. Associated blog post: https://blog.uint0.dev/cve-2021-44228/ Helpers Echo chamber cd echochamber Logs input via log4j. Build : ./gradlew build Run : ./gradlew run --console=plain Ldap Exfil Server cd ldap-listener Ldap...

pyc2

pyc2 simple c2 written in python2 to demonstrate security concepts. use icmp echo requests and replies to trade base64 encoded commands and replies. Video explaining some of the security concepts and implementation decisions: https://www.youtube.com/watch?v=DHrEn7oK9vQ requires scapy pip install...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...

CVE-2020-14882-GUI-Test

CVE-2020-14882-GUI I have just started learning the Qt framework, so this is a product of learning the Qt development framework. Currently, there are issues such as incomplete echo reception and other problems, for testing purposes only...

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947 batch detection script. The echo command is not regex-filtered. Please use it for now; I will update later. Place url.txt in the script directory. Directly run: python 脚本.py Demo: After the scan is complete, a success.txt file will be generated. This script will...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

openam-CVE-2021-35464

openam CVE-2021-35464 tomcat command execution with echo. Project based on ysoserial and Java-Rce-Echo Building the project requires adding ysoserial.jar and jato-14.6.3.jar to dependencies. POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081 Upgrade-Insecure-Requests: 1 User-Agent:...

CVE-2020-10199

CVE-2020-10199 Echo version, casually written untested bug Usage: python http://127.0.0.1:8080 username password Reference: https://www.cnblogs.com/magic-zero/p/12641068.html...

GeoServer-Tools-CVE-2024-36401

GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 Graphical Exploitation Tool, supports exploitation across various JDK versions, as well as echo and memory shell implementation. Affected versions: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recently during HW Red/Blue team...

Log4j2-RCE

Log4j2-RCE Log4j2 CVE-2021-44228 Reproduction and Echo Exploit...

CVE-2023-5044

CVE-2023-5044 Poc for CVE 2023 5044 Prerequisites Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Give Docker the correct privileges sudo usermod -aG docker $USER && newgrp docker Start the cluster with extraPortMaping and node-labels to prepare it for an ingress. cat EOF | kind create cluster...

CVE-2023-30212

CVE-2023-30212 Exploiting vulnerability in Ourphp version 7.2.0 also called CVE 2023 30212 Step 1. Download and install Docker in your system Note. I am using Docker because it’s quick and easy to install ubuntu. Step 2. Setup Docker environment docker pull ubuntu docker run -d -t –name...

ROOT-APP-GOBINARY-GHSA-F48P-C9V4-H7XV GHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-f48p-c9v4-h7xv in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-H7WR-284F-5QVC GHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-h7wr-284f-5qvc in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-CXF3-9H37-7RR8 GHSA-cxf3-9h37-7rr8 in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-cxf3-9h37-7rr8 in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

CVE-2026-118266

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a safe HTTP method as the override target for a POST request. When MethodOverride is registered before CSRF in the post-routing middleware chain, route selection retains the original state-changing POS...

CVE-2026-118654

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route matching and serve a file through a public static route even though the corresponding direct path is protected by route-level middleware. An unauthenticated attacker can read...