PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

CVE-2024-4577

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @orange8361 of DEVCORE @d3vc0r3. Make sure to follow his outstanding research, our role was to only recreate and develop the exploit for this issue. Security Alert: CVE-2024-4577 PHP CGI Argument Injection Vulnerability Overview CVE-2024-45...

webcgi-exploits

Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit $ ./exploit.py -i 192.168.0.1 + DLink...

poc-yaws-cgi-shell-injection

OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi curl...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...

CVE-2014-6271

CVE-2014-6271 Description This project allows reproducing the vulnerability CVE-2014-6271 , also known as Shellshock. Shellshock is a security vulnerability in Bash that allows executing malicious code via environment variables. The purpose of this project is to demonstrate the impact of this...

CVE-2017-9833

CVE-2017-9833 Reference: https://www.cvedetails.com/cve/CVE-2017-9833/ Shodan dork: product:"Boa Web Server" 0.94.14rc21 Payload: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow POC:...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...

CVE-2024-4577-LetsDefend-walkthrough

Incident Response Walkthrough: Mitigating a Zero-Day Attack CVE-2024-4577 LetsDefend Write-up PHP-CGI CVE-2024–4577 Scenario: Our Intrusion Detection System IDS and Intrusion Prevention System IPS identified a potential attack targeting a critical system component at 12:05 PM UTC. This write-up...

php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit Tool Automated testing tool for PHP-CGI parameter injection vulnerabilities , supporting CVE-2024-4577 and CVE-2024-8926 , with capabilities for command execution, file upload, download , etc. 📌 Introduction This tool can be used to test...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI Overview This repository contains scripts to check for the CVE-2024-4577 vulnerability, an argument injection issue in PHP-CGI. You can use the provided Bash, Go, and Python scripts to test a list of domains for this vulnerability. I've als...

POC-CVE-2021-41773

POC-CVE-2021-41773 On the 5th of October 2021, a CVE detailing a path traversal attack on Apache HTTP Server v2.4.49 was released. Assigned the number CVE-2021-41773, it was released with the following description: A flaw was found in a change made to path normalization in Apache HTTP Server...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

cve-2024-4577

CVE-2024-4577 Vulnerability Test Script This Python script is a simple Proof of Concept PoC tool for diagnosing the latest PHP vulnerability CVE-2024-4577. ⚠️ This tool is provided for security assessment purposes and should only be used on systems you own or targets with prior authorization. 📌...

CVE-2022-30525

CVE-2022-30525 A OS Command Injection Vulnerability in the CGI Program of Zyxel Executive Summary The vulnerability, first discovered on April 13, 2022, caused remote code execution in Zyxel firewall products. This important vulnerability with a CVSS score of 9.8 was blocked with the update...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2019-0232

CVE-2019-0232 Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution RCE Video PoC available at https://www.youtube.com/watch?v=RA7kzuHOWqA Details Apache Tomcat has a vulnerability in the CGI Servlet, which can be exploited to achieve remot...

CVE-2024-46658

CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Command Injection Vulnerability Usage 1- Edit the URL in the script. 2- Edit the CookieLogin value in the script. 3- Run the script, it will allow you to executing commands. Vulnerability Details GET...

CVE-2024-4577

CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...