577 matches found
Salat-Stealer-Telegram-Proxy-Decoy-C2-Analysis
1. Telegram Proxy Decoy – Camouflage & Evasion When executed, Salat Stealer displays a fully functional Telegram Proxy interface. This decoy serves as a camouflage to trick the user into thinking they are running a legitimate proxy application, while the malware executes its malicious operations...
Commvault-CVE-2025-34028
CVE-2025-34028 Commvault Remote Code Execution CVE-2025-34028 NSE How to run in Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...
CVE-2021-34473-NMAP-SCANNER
CVE-2021-34473-NMAP-SCANNER A massive scanner for CVE-2021-34473 Microsoft Exchange Windows Vulnerability Commands root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Example root@kitploit: Starting Nmap 7.92...
CVE-2021-21975
CVE-2021-21975 Nmap script to check vulnerability CVE-2021-21975 Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Blog...
CVE-2025-0108
Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
mediator
Mediator는 운영자와 셸이 "중개자mediator" 서버에 연결되어 연결을 브리징하는 종단간 암호화 리버스 셸입니다. 이를 통해 운영자/핸들러가 연결을 수신하기 위해 포트 포워딩을 설정할 필요가 없어집니다. 또한 Mediator는 플러그인을 생성하여 리버스 셸의 기능을 확장할 수 있습니다. Mediator의 스크립트는 독립 실행형으로 실행하거나 다른 침투 테스트 및 사고 대응 도구에 통합하기 위해 임포트할 수 있습니다. 아키텍처: 종단간 암호화 채팅 애플리케이션에서 영감을 받은 Mediator는 리버스 셸의 클라이언트/서...
scanner-CVE-2020-5902
BIP-IP TMUI Scanner - CVE-2020-5902 Script will run checks for CVE-2020-5902 Usage: Provide list of IP address in "ip.txt" to scan for CVE-2020-5902 Default port: 443 Sample Output + Host is vulnerable to CVE-2020-5902:IP Address + Host is not vulnerable to CVE-2020-5902:IP Address...
cve-2021-22005-exp
cve-2021-22005-exp 0x01 脆弱性の概要 2021年9月21日、VMwareはセキュリティアドバイザリを公開し、vCenter Serverにおける19件のセキュリティ脆弱性を開示しました。これらの脆弱性のCVSSv3スコアは4.3〜9.8の範囲です。 その中でも最も深刻な脆弱性は、vCenter Serverにおける任意ファイルアップロードの脆弱性（CVE-2021-22005）です。この脆弱性はvCenter Serverの分析サービスに存在し、そのCVSSv3スコアは9.8です。vCenter...
CVE-2024-21762
Usages: python3 exploit.py --target 192.168.1.1:443 --callback-ip YOURIP --callback-port 8080...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner VMware vCenter Server remote code execution vulnerability.A malicious attacker with access to port 443 can send a carefully constructed request to vCenter Server, which will eventually cause remote arbitrary code execution. Installation & Usage git clone...
CVE-2020-5902-F5BIG
CVE-2020-5902-F5BIG Just Run Command like 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...
CVE-2021-26855
CVE-2021-26855 CVE-2021-26855Proxylogon이라고도 알려짐는 Exchange의 서버 측 요청 위조SSRF 취약점으로, 공격자가 임의의 HTTP 요청을 보내고 Exchange 서버로 인증할 수 있게 합니다. 취약점을 발견한 연구자 Orange Tsai에 따르면, CVE-2021-26855는 CVE-2021-27065와 연계될 때 코드 실행을 허용합니다아래 참조. 성공적인 익스플로잇 체인은 인증되지 않은 공격자가 "오픈 443 포트만을 통해 Microsoft Exchange Server에서 임의의 명령을...
SUSE CVE-2026-54764
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured with trustForwardHeader: false, derives the X-Forwarded-Port header sent to the authentication service from the original incoming request instead of t...
Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from improper...
Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)
Summary A vulnerability exists in the Community Tier of Harden-Runner that allows bypassing the egress-policy: block network restriction using DNS queries over TCP. Harden-Runner enforces egress policies on GitHub runners by filtering outbound connections at the network layer. When egress-policy:...
CVE-2021-22005
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...
Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)
The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...
EUVD-2016-4972
Malware in sbrugna...