grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 de Grafana, detecta automáticamente si hay vulnerabilidades, los plugins existentes, extrae claves, descifra el archivo db del servidor y genera información de datasourrce. Uso Proporciona funcionalidades de exp...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...

grafana-CVE-2021-43798

Grafana CVE Scan 21-43798 0.1 Escáner para la Vulnerabilidad de Path Traversal en Grafana encontrada en CVE-2021-43798 Aviso legal: ¡Esto es solo con fines educativos! Referencias para CVE: 1 - Detalles del CVE de NIST 2 - Notas de Grafana Soluciones alternativas Todas las instalaciones entre...

CVE-2021-43798-Grafana

CVE-2021-43798 Grafana: Lectura arbitraria de archivos 1. Instalación pip3 install -r requirements.txt 2. Uso $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || | / / | | || | | | / / , | | |...

GrafanaDirectoryScanner

PoC para CVE-2021-43798 Grafana es una plataforma de código abierto para monitoreo y observabilidad. Las versiones de Grafana desde 8.0.0-beta1 hasta 8.3.0 excepto las versiones parcheadas son vulnerables a ldirectory traversal, permitiendo el acceso a archivos locales. La URL vulnerable es:...

CVE-2021-43798-Grafana-POC

CVE-2021-43798: POC de la vulnerabilidad de lectura arbitraria de archivos en Grafana Instrucciones de uso: python3 exp.py IP:PORT...

LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Implementación en Python de una herramienta para descifrar y cifrar datos sensibles en Grafana, abordando específicamente las vulnerabilidades asociadas con CVE-2021-43798. Grafana cifra todas las contraseñas de las fuentes de datos utilizando el algoritmo AES con la...

GrafXploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 en Grafana. Detecta automáticamente si hay vulnerabilidad, los plugins presentes, extrae claves, descifra el archivo de base de datos del servidor y muestra la información de datasource. Uso Proporciona las...

Grafana-8.3-Directory-Traversal

CVE-2021-43798 Python script Description: Grafana 8.3.0 Directory Traversal Try this if EDB-ID 50581 is not working! Original Article: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 During a box in OffSec Proving Ground Fanatastic, I...

CVE-2021-43798

CVE-2021-43798...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

cve-2021-43798-enum

This repository does not have a README...

GrafanaDirInclusion

Grafana CVE-2021-43798 Exploit Script Script to demonstrate the Grafana directory traversal exploit CVE-2021-43798 that affects Grafana versions 8.0.0-beta1 through 8.3.0. Primarily used for a demonstration in a CTF. Written in python with standard library modules only. Only use this for legitima...

Grafana_POC-CVE-2021-43798

Grafana-Poc No utilice esta herramienta para fines ilegales. 1. Método de uso: python3 grafanahole.py Introduce ip:port en domain.txt 2. Alcance de la vulnerabilidad Versiones afectadas: Grafana 8.0.0 - 8.3.0 Versiones seguras: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2021-43798

This repository does not have a README...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Unauthorized reading of files in Grafana 0day It looks like the new 0day LFI in Grafana exists thanks to the grafana-clock-panel plugin. It is enough to send a GET request of the form: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passw...

grafana-cve-2021-43798

grafana-cve-2021-43798 This repository contains files for reproducing the vulnerability. Deploy this in your cluster using this command. kubectl apply -f grafana-vuln-app.yaml...

CVE-2021-43798-mass_scanner

Grafana CVE 2021-43798 Grafana Unauthorized arbitrary file reading vulnerability CVE-2021-43798 deps python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Dorks Dorks Shodan | Google Google Dorks Shodan Dorks Usage Targets without / at the end. And without http:// or...