CVE-2023-4450-Attack

CVE-2023-4450-Attack 用于攻击JimuReport的CVE-2023-4450漏洞的自动化工具 简介 本工具只可用于安全测试，勿用于非法用途！ Usage root@kitploit: java -jar CVE-2023-4450-Attack.jar 提供了三个功能：命令执行、CMD/冰蝎内存马 注入冰蝎内存马后进行如下配置： SomeTestResult 结语...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379利用 CVE-2024-50379.py和upload.txt在同一目录 upload内容为马子 这里的upload内容为生成一个2.jsp的文件 可通过2.jsp创建一个新的4.jsp的原版冰蝎...

CVE-2023-22527-MEMSHELL

项目介绍 此项目参考 Boogipop 师傅的项目 https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL ，在原项目上支持 1. 冰蝎内存马的注入 2. 增加 http 代理功能，用法 -proxy http://127.0.0.1:8080 3. 修改了命令行参数解析功能处的代码 漏洞环境 注入内存马的过程中使用的环境在 https://github.com/vulhub/vulhub/tree/master/confluence/CVE-2023-22527 confluence 版本为 8.5.3 使用 程序参数...

CVE-2019-3396-Memshell-for-Behinder

CVE-2019-3396-Memshell-for-Behinder CVE-2019-3396 Behinder用Memshell 使い方 javac BehinderMemShell.java 次に BehinderMemShell.classをBCELに変換する Behinder URL : http://the-confluence-ip/login.action Script Type： JSP Password：rebeyond Header：X-Expires: memok...

spring4shell_behinder

Spring4shellbehinder これは何ですか？ Spring4shell脆弱性（CVE-2022-22965）に対するバッチ高速利用ツールです。 貢献者 4nth0ny @星期五ラボ Issue/PR歓迎 : 環境 python 3.x Behinder3.0 Beta9 インストール root@kitploit: python3 -m pip install -r requirements.txt 使い方 root@kitploit: python3 springrce.py test.txt test.txt root@kitploit:...

Earth Longzhi Unleashes New ‘Stack Rumbling’ Tactic

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary APT41s Earth Longzhi launches a new campaign targeting organizations in Asia Pacific using "stack rumbling" to disable security products and install Behinder web shell. To receive real-time threat...

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber...

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber...

Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

A sophisticated Chinese advanced persistent threat APT actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack. "The attacker implemented an interesting web...

Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability

Atlassian has warned of a critical unpatched remote code execution vulnerability impacting Confluence Server and Data Center products that it said is being actively exploited in the wild. The Australian software company credited cybersecurity firm Volexity for identifying the flaw, which is being...