CVE-2017-9248

Este repositorio no tiene un README...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

Telewreck

Telewreck 一个 Burp 扩展，用于检测和利用存在 CVE-2017-9248 漏洞的 Telerik Web UI 版本。该扩展基于 Paul Taylor（@bao7uo）编写的原始利用工具，可在 https://github.com/bao7uo/dpcrypto 获取。感谢他的贡献。 一篇关于如何通过 Telerik Web UI 利用 Web 应用的相关博文也可以在这里找到：这里。 功能 在被动扫描期间检测易受攻击的 Telerik Web UI 版本。 暴力破解密钥并发现“文档管理器”链接，与原始利用工具相同。 截图 安装...

telerik-scanner-cve-2017-9248

Telerik CVE-2017-9248 漏洞扫描器 V2.0 一款全面的 Python 扫描器，用于发现 Telerik 端点并检测 CVE-2017-9248 加密漏洞，具备企业级批量扫描能力。 功能特性 快速与发现模式 ：单一路径测试或全面发现（50+ 路径） 批量扫描 ：从文件中自动扫描多个目标 多线程 ：快速并发端点枚举 版本检测 ：识别特定 Telerik 版本 代理支持 ：可与 Burp Suite 等工具配合使用 CSV/JSON 输出 ：专业报告与自动化支持 进度追踪 ：批量操作期间实时更新 输出管理 ：自定义目录与时间戳文件 安装 root@kitploit: gi...

dp_cryptomg

dpcryptomg 另一个用于利用 CVE-2017-9248 的工具，这是 Telerik UI for ASP.NET AJAX 对话框处理程序中的一个加密弱点。利用该漏洞可以访问一个文件管理器工具，该工具能够上传任意文件，通常会导致远程代码执行。 该漏洞是由于在解密 Telerik "DialogParameters"（一系列加密的配置值）过程中的信息泄露导致的。这些值被提供给用户，然后作为用户输入回显给服务器。解密过程中泄露的信息使得能够系统地发现...

plotaroute.com Cross Site Scripting vulnerability OBB-3658664

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

okashik.com Cross Site Scripting vulnerability OBB-3649394

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hifionline.cz Cross Site Scripting vulnerability OBB-3525780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rymerlake.lopressure.com Cross Site Scripting vulnerability OBB-3480077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

guster.com Cross Site Scripting vulnerability OBB-3302438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

epeitaliana.it Cross Site Scripting vulnerability OBB-3289390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cccj.jp Cross Site Scripting vulnerability OBB-3277268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heartandsoulacademy.de Cross Site Scripting vulnerability OBB-3262872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eb-patent.de Cross Site Scripting vulnerability OBB-3256699

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thegiftboxconfections.com Cross Site Scripting vulnerability OBB-3237549

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

studylight.org Cross Site Scripting vulnerability OBB-3085729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zavodtechplast.ru Cross Site Scripting vulnerability OBB-2946316

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pronews.jp Cross Site Scripting vulnerability OBB-2841845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sl966f.com Cross Site Scripting vulnerability OBB-2637246

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

manorpreschool.org Cross Site Scripting vulnerability OBB-2634235

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...