dp_cryptomg

dpcryptomg Otra herramienta para explotar CVE-2017-9248, una debilidad criptográfica en el controlador de diálogo de Telerik UI para ASP.NET AJAX. La explotación permite acceder a una utilidad de administración de archivos capaz de subir archivos arbitrarios, lo que normalmente conduce a la...

Telewreck

Telewreck 一个 Burp 扩展，用于检测和利用存在 CVE-2017-9248 漏洞的 Telerik Web UI 版本。该扩展基于 Paul Taylor（@bao7uo）编写的原始利用工具，可在 https://github.com/bao7uo/dpcrypto 获取。感谢他的贡献。 一篇关于如何通过 Telerik Web UI 利用 Web 应用的相关博文也可以在这里找到：这里。 功能 在被动扫描期间检测易受攻击的 Telerik Web UI 版本。 暴力破解密钥并发现“文档管理器”链接，与原始利用工具相同。 截图 安装 1. 将 telewreck.py...

dp_crypto

dpcrypto Exploit de oráculo de cifrado basado en Base64 para CVE-2017-9248 Manejador de diálogo de Telerik UI for ASP.NET AJAX Publicado en exploit-db Actualización 2020 - Tenga en cuenta que la versión en exploit-db ahora está muy desactualizada en comparación con la última versión aquí en GitHu...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

telerik-scanner-cve-2017-9248

Escáner de Vulnerabilidad Telerik CVE-2017-9248 V2.0 Un escáner integral en Python que descubre endpoints de Telerik y prueba la vulnerabilidad criptográfica CVE-2017-9248 con capacidades de escaneo masivo de nivel empresarial. Características Modos Rápido y de Descubrimiento : Prueba de ruta úni...

CVE-2017-9248

This repository does not have a README...

plotaroute.com Cross Site Scripting vulnerability OBB-3658664

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

okashik.com Cross Site Scripting vulnerability OBB-3649394

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hifionline.cz Cross Site Scripting vulnerability OBB-3525780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rymerlake.lopressure.com Cross Site Scripting vulnerability OBB-3480077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

guster.com Cross Site Scripting vulnerability OBB-3302438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

epeitaliana.it Cross Site Scripting vulnerability OBB-3289390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cccj.jp Cross Site Scripting vulnerability OBB-3277268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heartandsoulacademy.de Cross Site Scripting vulnerability OBB-3262872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eb-patent.de Cross Site Scripting vulnerability OBB-3256699

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thegiftboxconfections.com Cross Site Scripting vulnerability OBB-3237549

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

studylight.org Cross Site Scripting vulnerability OBB-3085729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zavodtechplast.ru Cross Site Scripting vulnerability OBB-2946316

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pronews.jp Cross Site Scripting vulnerability OBB-2841845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sl966f.com Cross Site Scripting vulnerability OBB-2637246

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...