CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 Exploit CVE-2024-50379.py and upload.txt are in the same directory The upload content is the webshell Here, the upload content generates a 2.jsp file You can use 2.jsp to create a new 4.jsp, the original Behinder webshell...

spring4shell_behinder

Spring4shellbehinder ¿Qué es esto? Una herramienta de explotación rápida y en lote para la vulnerabilidad Spring4Shell CVE-2022-22965 Contribuyentes 4nth0ny @星期五实验室 Bienvenidos a enviar issues/pr : Entorno python 3.x Behinder3.0 Beta9 Instalación root@kitploit: python3 -m pip install -r...

CVE-2023-22527-MEMSHELL

Descripción del proyecto Este proyecto hace referencia al proyecto del maestro Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL , y sobre la base del proyecto original soporta: 1. Inyección de memoria shell de 冰蝎 2. Añadir funcionalidad de proxy HTTP, uso: -proxy...

CVE-2023-4450-Attack

CVE-2023-4450-Attack Herramienta automatizada para explotar la vulnerabilidad CVE-2023-4450 en JimuReport Introducción ¡Esta herramienta solo debe usarse para pruebas de seguridad, no para fines ilegales! Usage root@kitploit: java -jar CVE-2023-4450-Attack.jar Ofrece tres funciones: ejecución de...

CVE-2022-26134_Behinder_MemShell

CVE-2022-26134BehinderMemShell Dirección del proyecto original: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Modificado para conectar el shell de memoria Behinder java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...

CVE-2019-3396-Memshell-for-Behinder

CVE-2019-3396-Memshell-for-Behinder CVE-2019-3396 Memshell for Behinder Usage javac BehinderMemShell.java then Turn BehinderMemShell.class to BCEL Behinder URL : http://the-confluence-ip/login.action Script Type： JSP Password：rebeyond Header：X-Expires: memok...

spring-core-rce

CVE-2022-22965: Spring-Core-Rce EXP Features: 1. Vulnerability detection does not write a webshell, simple string output 2. Custom webshell file name and path 3. Does not append to the same file; each detection writes to a different webshell file name 4. Supports writing Behinder webshell 5. Prox...

CVE-2022-39952_webshell

Escribir Behinderwebshell en el objetivo usando CVE-2022-39952 Dirección del archivo: https://xx.xx.xx.xx:8443/shell.jsp contraseña:rebeyond Versión usada: Behinderv3.0 Mejora del script de: https://github.com/horizon3ai/CVE-2022-39952...

Earth Longzhi Unleashes New ‘Stack Rumbling’ Tactic

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary APT41s Earth Longzhi launches a new campaign targeting organizations in Asia Pacific using "stack rumbling" to disable security products and install Behinder web shell. To receive real-time threat...

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber...

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber...

Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

A sophisticated Chinese advanced persistent threat APT actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack. "The attacker implemented an interesting web...

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

Atlassian has warned of a critical unpatched remote code execution vulnerability impacting Confluence Server and Data Center products that it said is being actively exploited in the wild. The Australian software company credited cybersecurity firm Volexity for identifying the flaw, which is being...