Laravel-debug-Checker

Laravel-debug-Checker CVE-2021-3129 Checker por ./MrMad Referencia : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 instalar módulo root@kitploit: python -m pip install -r requirements.txt instalación en linux root@kitploit: git clone...

CVE-2021-3129-exp

Vulnerabilidad RCE en modo Debug de Laravel CVE-2021-3129 poc / exp CVE-2021-3129 exp / poc Nota ⚠️: Debido a que la explotación y detección de esta vulnerabilidad envían múltiples solicitudes, el proceso puede ser lento. uso: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -...

Laravel-8.4.2-rce-CVE-2021-3129

Laravel-8.4.2-rce-CVE-2021-3129 root@kitploit: exploit.py tested use python3,and only working with phpggc . first docker-compose up port on 8888 at 127.0.0.1 generate key first...

Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP Exploit de referencia: https://github.com/SNCKER/CVE-2021-3129 Requisitos de versión Laravel Iginition == 2.5.1 Probado con la versión local del EXP en Laravel 8.4.2 Notas importantes Se debe colocar este EXP en el directorio de phpgcc, de lo contrario no se podrá invocar...

Mass-CVE-2021-3129-Scanner

Scanner em massa para CVE-2021-3129 Laravel Debug RCE Uso root@kitploit: $ bash massCVE-2021-3129scan.sh list.txt...

laravel-exploits

laravel-exploits 针对 CVE-2021-3129 的漏洞利用 详情：https://www.ambionics.io/blog/laravel-debug-rce 用法 root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2021-3129-piperpwn

Este repositorio nao tem um README...

CVE-2021-3129

Este repositorio nao tem um README...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 un clic per ottenere una shell Utilizzo python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Dopo il successo, connettersi utilizzando Godzilla...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 Ein-Klick-getshell Verwendung python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Nach erfolgreicher Ausführung einfach mit Godzilla verbinden...

CVE-2021-3129

CVE-2021-3129 Anleitung: Hinweis: Es wird eine PHP-Umgebung benötigt. root@kitploit: python3 CVE-2021-3129.py -u http://127.0.0.1:80 nur POC-Prüfung python3 CVE-2021-3129.py -u http://127.0.0.1:80 -c whoami Befehlsausführung, standardmäßig werden alle Exploit-Chains durchlaufen python3...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Descrição Integra https://github.com/zhzyker/CVE-2021-3129 e https://github.com/SNCKER/CVE-2021-3129; este projeto possui as seguintes vantagens: Mantém o recurso de comandos personalizados Adiciona o recurso de saída automática após exploração bem-sucedida,...

CVE-2021-3130

CVE-2021-3129 L'ennesimo exploit per CVE-2021-3129! Realizzato per offrire più funzionalità e affidabilità. Basato su https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: Questo script è stato creato per auditare la sicurezza dei sistemi. Utilizzalo solo sui...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug-Modus RCE Lab Ein praktisches Hands-on-Lab zur Ausnutzung von CVE-2021-3129 – einer kritischen Laravel-Schwachstelle, die nicht authentifiziertes Dateilesen und potenzielle RCE ermöglicht. Schnellstart root@kitploit: Clone git clone...

Exploit for CVE-2021-3129

No d...

Exploit for CVE-2021-3129

laravel-rce Laravel 8.4.2 RCE...

CVE-2021-3129

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2...

MTN Group: Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/

The Laravel framework contained a vulnerability known as CVE-2021-3129, which allowed remote code execution due to unsafe usage of PHP in the Ignition debug module. This vulnerability was relatively easy to exploit and did not require user authentication, resulting in a high CVSS score of 9.8. Th...

Exploit for CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python e...

Facade Ignition < 1.16.14 / 2.x < 2.4.2 / 2.5.x < 2.5.2 RCE

The version of Facade Ignition installed of the remote host is prior to 1.16.14, or 2.x prior to 2.4.2, or 2.5.x prior to 2.5.2. It is, therefore, affected by a remote code execution vulnerability. Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attacke...