Lucene search
+L

19 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

Cobaltstrike-RCE-CVE-2022-39197

Reproduktion der Cobaltstrike-RCE-Sicherheitslücke CVE-2022-39197 Kurzbeschreibung der Sicherheitslücke Die Sicherheitslücke befindet sich in der Beacon-Software von Cobalt Strike und kann es einem Angreifer ermöglichen, einen falsch formatierten Benutzernamen in der Beacon-Konfiguration zu setze...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2022-39197-RCE

CVE-2022-39197-RCE Erstes Dieses Projekt wurde von @its-arun übernommen und basiert auf https://github.com/its-arun/CVE-2022-39197 Als ich das Skript testete, stellte ich fest, dass das Frida-Skript die Daten nicht in der normalen Reihenfolge abfragen konnte. Die Methode bestand darin, das...

6.1CVSS7.3AI score0.46446EPSS
SaveExploits6References3
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch Verwendung Parameter beim Start von Cobaltstrike hinzufügen -javaagent:fixXss-1.0-SNAPSHOT.jar...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2022-39197

CVE-2022-39197 RCE POC Referenzlinks https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — Es gibt eine großartige ausführliche Analyse dieser Sicherheitslücke https://www.agarri.fr/blog/archives/2012/05/11/svgfilesandjavacodeexecution/index.html...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CSPOC

Cobalt Strike XSS persistente RCE CVE-2022-39197 Parametri di esecuzione: -u: indirizzo di ascolto HTTP di Cobaltstrike, es. http://127.0.0.1:8500 -p: Payload, es. non troppo lungo Dimostrazione: Comando di compilazione: go build -ldflags "-s -w" Gruppo QQ: Clicca per unirti: 528118163 Unisciti a...

6.1CVSS7.1AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 7:10 a.m.2 views

cve-2022-39197

cve-2022-39197 Derzeit können nur entfernte Bilder geladen werden...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 2:39 a.m.3 views

pig_CS4.4

Hinweis: Nur für Sicherheitsforschung und Lernzwecke. Bei anderweitiger Nutzung des Tools trägt der Nutzer die gesamte rechtliche und damit verbundene Haftung; Autor und Herausgeber übernehmen keinerlei rechtliche oder damit verbundene Haftung. Cobalt Strike 4.4 Zhuzhu Edition – Diese Version ist...

6.1CVSS7.3AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 10:20 a.m.2 views

about_cobaltstrike4.5_cdf

aboutcobaltstrike4.5cdf Crack der Version cobaltstrike4.5, Entfernen der checksum8-Signatur, Umgehung von BeaconEye, Behebung des Stage-Leaks über falsche Pfade, Hinzufügen der TOTP-Zwei-Faktor-Authentifizierung, Behebung von CVE-2022-39197 usw. Wenn Sie nach diesem Projekt suchen:...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
RedhatCVE
RedhatCVE
added 2025/05/22 10:11 p.m.14 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.1CVSS8.9AI score0.46446EPSS
SaveExploits6References1
GithubExploit
GithubExploit
added 2023/12/03 1:45 p.m.323 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...

7.5CVSS7.6AI score0.999EPSS
SaveExploits29
VulnCheck KEV
VulnCheck KEV
added 2023/01/17 12:00 a.m.5 views

VulnCheck KEV: CVE-2022-39197

Fortra Cobalt Strike contains a cross-site scripting XSS vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely...

6.1CVSS7AI score0.46446EPSS
SaveExploits6References1
GithubExploit
GithubExploit
added 2022/11/24 5:22 p.m.415 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197 RCE POC Reference Links https://mp...

6.1CVSS6.5AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/10/22 10:11 a.m.55 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197-RCE First This project was modified from...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/10/14 11:46 a.m.303 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

CVE-2022-39197 RCE POC Usage - Prepare Payload 1...

6.1CVSS6.5AI score0.46446EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2022/09/24 8:14 a.m.74 views

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Cobalt Strike Storage-Type XSS RCE CVE-2022-39197 Run Par...

6.1CVSS7AI score0.46446EPSS
SaveExploits6
Circl
Circl
added 2022/09/22 7:11 a.m.27 views

CVE-2022-39197

creationtimestamp| type| source ---|---|--- 2022-09-22 07:11:51+00:00| seen| https://t.me/cibsecurity/50256 2022-09-23 06:29:01+00:00| published-proof-of-concept| https://t.me/proxybar/1003 2022-09-23 07:06:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/275 2022-09-24 13:33:46+00:00...

6.1CVSS7.2AI score0.46446EPSS
SaveExploits6References25
NVD
NVD
added 2022/09/22 1:15 a.m.29 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.1CVSS0.46446EPSS
SaveExploits6References3
CVE
CVE
added 2022/09/22 12:43 a.m.680 views

CVE-2022-39197

CVE-2022-39197 affects HelpSystems Cobalt Strike Team Server up through version 4.7, where a cross-site scripting vulnerability in the Teamserver enables an attacker to influence the Beacon configuration by supplying a malformed username in payloads. The public data describe several PoCs and expl...

6.1CVSS6AI score0.46446EPSS
SaveIn wildExploits6References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/22 12:43 a.m.14 views

CVE-2022-39197

An XSS Cross Site Scripting vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the...

6.3AI score0.46446EPSS
SaveExploits6References2
Rows per page
Query Builder