Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet 测试POC（可用于外网测试） python CVE-2020-2551.py HOST IP 尝试修改codebase进行远程类加载（失败） python CVE-2020-TEST.py HOST IP 浅谈 weblogic CVE-2020-2551 漏洞 & 外网POC构造 （首发于安全客，原文链接） 0x00 基础概念 学习这个漏洞需要一些前置知识，比如CORBA与RMI 简单的概述一下：...

heartbleedscanner

Heartbleed スキャナー OpenSSL メモリリーク CVE-2014-0160 用ネットワークスキャナー -t パラメータ：タイムアウトを秒単位で最適化します。 -f パラメータ：脆弱なシステムのメモリリークをログに記録します。 -n パラメータ：ネットワーク全体をスキャンします。 -i パラメータ：リストファイルからスキャンします。既にターゲットがある場合に便利です。 -r パラメータ：IPアドレスをランダム化して線形スキャンを回避します。 -s パラメータ：SSL/TLSを開始するために平文コマンドが必要なサービス（HTTPS/SMTP/POP3/IMAP）を利用します。...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC 認証バイパス RCE エクスプロイト ⚠️ Cobbler における認証バイパスを利用した重大なリモートコード実行 🛠️ @dollarboysushil による PoC 実装 💡 概要 Cobbler はネットワークインストール環境の迅速なセットアップを可能にする Linux インストールサーバーであり、バージョン 3.0.0 から 3.2.3 未満および 3.3.7 未満に認証の脆弱性があります。関数 utils.getsharedsecret は常に -1 を返すため、誰でも空のユーザー名 '' とパスワード -1 で...

uncle-spufus

█░░█ █▀▀▄ █▀▀ █░░ █▀▀ █▀▀ █▀▀█ █░░█ █▀▀ █░░█ █▀▀ v1.6" █░░█ █░░█ █░░ █░░ █▀▀ ▀▀█ █░░█ █░░█ █▀▀ █░░█ ▀▀█" ░▀▀▀ ▀░░▀ ▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀ █▀▀▀ ░▀▀▀ ▀░░ ░▀▀▀ ▀▀▀" 언클 스푸푸스 v1.6 MAC 주소와 호스트네임 스푸핑을 자동화하는 도구 언클 스푸푸스란? 긴 이야기 모든 게 생각나네요, 예전에 macchanger를 사용해 MAC 주소를 스푸핑하던 시절이요. MAC 주소가 성공적으로 변경되었다고 표시되었지만, 와이파이...

nogotofail

nogotofail Nogotofail은 개발자와 보안 연구자가 약한 TLS/SSL 연결 및 민감한 평문 트래픽을 유연하고 확장 가능하며 강력한 방식으로 탐지하고 수정할 수 있도록 설계된 네트워크 보안 테스트 도구입니다. 일반적인 SSL 인증서 확인 문제, HTTPS 및 TLS/SSL 라이브러리 버그, SSL 및 STARTTLS 스트리핑 문제, 평문 트래픽 문제 등을 테스트합니다. 설계 Nogotofail은 경로상 네트워크 MiTM과 테스트 중인 장치용 선택적 클라이언트로 구성됩니다. nogotofail의 개요 및 설계 목표는...

CMD_Bypass_Assessment

CMD 우회 방법 분석 CMD 우회 방법 분석은 Windows 시스템에서 CMD 우회 방법을 자동으로 테스트하고 결과를 평가하는 PowerShell 스크립트입니다. 이 스크립트는 다양한 CMD 우회 방법을 확인하고 결과를 텍스트 파일에 저장하며 보안 권장 사항을 제공합니다. 사용 방법 PowerShell 스크립트를 실행하려면 PowerShell 세션을 엽니다. PowerShell 세션에 스크립트 파일을 추가하거나 직접 실행합니다: .\CmdBypassScoreCard.ps1 스크립트가 실행되면 CMD가 자동으로 우회 방법을...

at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

peeko

peeko バージョン: v1.1 peeko は、被害者のブラウザを内部ネットワーク内のステルスプロキシとして利用する、ブラウザベースの XSS を利用した C2（コマンドアンドコントロール）ツールです。 注入された XSS ペイロードを通じて、peeko は中央サーバーへの WebSocket 接続を確立し、攻撃者は被害者のブラウザをリモートで制御して、内部サービスへのリクエスト送信、ネットワークスキャン、データの外部送信、さらには任意の JavaScript の実行まで可能になります。バイナリを1つも配置することなく、すべてを実現します。 特徴 攻撃者と被害者の間の WebSock...

cve-2019-0708-scan

cve-2019-0708-scan ip.txt保存网段： 192.168.1.0 127.168.2.0...

Oracle WebLogic Server - Remote Code Execution

Oracle WebLogic Server Oracle Fusion Middleware component: WLS Core Components is susceptible to a remote code execution vulnerability. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 2.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability could allow unauthenticated...

TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass

TOTOLINK EX1200T 4.1.2cu.5215 is susceptible to authentication bypass. An attacker can bypass login by sending a specific request through formLoginAuth.htm, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-42887 info:...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e., \\sms,...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Oracle Weblogic - Server-Side Request Forgery

An unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services. id: CVE-2014-4210 info: name: Oracle Weblogic - Server-Side Request Forgery author:...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

GitLab CI Lint API - Server-Side Request Forgery

GitLab 10.5 and later contain a server-side request forgery caused by insecure handling of webhook requests, letting unauthenticated attackers exploit the server for arbitrary requests, exploit requires sending crafted webhook requests. id: CVE-2021-22175 info: name: GitLab CI Lint API -...

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...