Lucene search
+L

19 matches found

Kitploit
Kitploit
added 2026/08/26 4:07 a.m.2 views

CSPOC

Cobalt Strike XSS مخزنة RCE CVE-2022-39197 معلمات التشغيل: -u: عنوان الاستماع HTTP لـ Cobaltstrike، مثل http://127.0.0.1:8500 -p: Payload، مثل لا يجب أن يكون طويلاً جداً عرض توضيحي: أمر التجميع:...

6.1CVSS0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 2:39 a.m.3 views

pig_CS4.4

ملاحظة: للاستخدام في أبحاث الأمان والتعلم فقط. إذا تم استخدام الأداة لأغراض أخرى، يتحمل المستخدم كامل المسؤولية القانونية والتبعات، ولا يتحمل المؤلف والناشر أي مسؤولية قانونية أو تبعات. Cobalt Strike 4.4 إصدار ZhuZhu الخنزير هذا الإصدار هو إصدار تجريبي داخلي قبل الإصدار، سيتم إصدار النسخة العامة ...

6.1CVSS0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 8:40 p.m.1 views

Cobaltstrike-RCE-CVE-2022-39197

Cobaltstrike RCE 脆弱性 CVE-2022-39197 の再現 脆弱性の概要 この脆弱性はCobalt StrikeのBeaconソフトウェアに存在し、攻撃者がBeaconの設定に不正な形式のユーザー名を設定することでXSSを誘発し、CSサーバー上でリモートコード実行を引き起こす可能性があります。 スクリーンショット: NTLMv2-SSP Hashの取得(前提:Cobalt StrikeがWindows上で実行されていること) 参考: https://www.freebuf.com/vuls/345522.html...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/08/25 7:46 p.m.1 views

CVE-2022-39197-RCE

CVE-2022-39197-RCE Premièrement Ce projet a été modifié à partir du projet @its-arun https://github.com/its-arun/CVE-2022-39197 Lorsque j'ai testé le script, j'ai constaté que le script frida ne pouvait pas interroger les données dans l'ordre normal. La méthode consiste à modifier le script frida...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6References3
Kitploit
Kitploit
added 2026/08/25 10:20 a.m.1 views

about_cobaltstrike4.5_cdf

aboutcobaltstrike4.5cdf Crack de cobaltstrike4.5, suppression de la signature checksum8, contournement de BeaconEye, correction de la fuite de chemin d'erreur exposant le stage, ajout de l'authentification à deux facteurs TOTP, correction de CVE-2022-39197, etc. Si vous cherchez ce projet :...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 7:47 a.m.1 views

cve-2022-39197

cve-2022-39197 حاليًا، يمكن تحميل الصور البعيدة فقط...

6.1CVSS7.3AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 4:17 a.m.1 views

CVE-2022-39197

CVE-2022-39197 RCE POC روابط مرجعية https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — يوجد تحليل متعمق رائع لهذه الثغرة https://www.agarri.fr/blog/archives/2012/05/11/svgfilesandjavacodeexecution/index.html...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 4:14 a.m.4 views

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch الاستخدام أضف المعاملات عند تشغيل cobaltstrike -javaagent:fixXss-1.0-SNAPSHOT.jar...

6.1CVSS7.3AI score0.46446EPSS
SaveExploits6
RedhatCVE
RedhatCVE
added 2025/05/22 10:11 p.m.14 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.1CVSS8.9AI score0.46446EPSS
SaveExploits6References1
GithubExploit
GithubExploit
added 2023/12/03 1:45 p.m.323 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...

7.5CVSS7.6AI score0.999EPSS
SaveExploits29
VulnCheck KEV
VulnCheck KEV
added 2023/01/17 12:00 a.m.5 views

VulnCheck KEV: CVE-2022-39197

Fortra Cobalt Strike contains a cross-site scripting XSS vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely...

6.1CVSS7AI score0.46446EPSS
SaveExploits6References1
GithubExploit
GithubExploit
added 2022/11/24 5:22 p.m.415 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197 RCE POC Reference Links https://mp...

6.1CVSS6.5AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/10/22 10:11 a.m.55 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197-RCE First This project was modified from...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/10/14 11:46 a.m.303 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197 RCE POC Usage - Prepare Payload 1...

6.1CVSS6.5AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/09/24 8:14 a.m.74 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Cobalt Strike Storage-Type XSS RCE CVE-2022-39197 Run Par...

6.1CVSS7AI score0.46446EPSS
SaveExploits6
Circl
Circl
added 2022/09/22 7:11 a.m.27 views

CVE-2022-39197

creationtimestamp| type| source ---|---|--- 2022-09-22 07:11:51+00:00| seen| https://t.me/cibsecurity/50256 2022-09-23 06:29:01+00:00| published-proof-of-concept| https://t.me/proxybar/1003 2022-09-23 07:06:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/275 2022-09-24 13:33:46+00:00...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6References25
NVD
NVD
added 2022/09/22 1:15 a.m.29 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.1CVSS0.46446EPSS
SaveExploits6References3
CVE
CVE
added 2022/09/22 12:43 a.m.680 views

CVE-2022-39197

CVE-2022-39197 affects HelpSystems Cobalt Strike Team Server up through version 4.7, where a cross-site scripting vulnerability in the Teamserver enables an attacker to influence the Beacon configuration by supplying a malformed username in payloads. The public data describe several PoCs and expl...

6.1CVSS6AI score0.46446EPSS
SaveIn wildExploits6References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/22 12:43 a.m.14 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.3AI score0.46446EPSS
SaveExploits6References2
Rows per page
Query Builder