45 matches found
CVE-2023-22515_RCE
Confluence获取后台权限后的一种rce方式 手动Getshell步骤 您可以在后台上传自定义的插件来实现rce 访问plugins/servlet/com.jsos.shell/ShellServlet...
confluence-cve-2023-22515
confluence-cve-2023-22515 Confluence 不当访问控制：CVE-2023-22515...
CVE-2023-22515
CVE-2023-22515 CVE-2023-22515, una vulnerabilidad crítica que afecta a instancias locales de Confluence Server y Confluence Data Center, una vulnerabilidad de control de acceso roto. Attlassian ha proporcionado una puntuación base CVSS de 10.0. PoC de una línea cat file.txt| while read host do;do...
CVE-2023-22515
CVE-2023-22515 Script de Explotación Versiones afectadas 8.0.0=Atlassian Confluence=8.5.1 Explotación de la vulnerabilidad python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -url URL url：http://xx.xx.xx.xx...
NSE--CVE-2023-22515
用于检测是否存在CVE-2023-22515的NSE脚本...
Confluence-EvilJar
aaaademo/Confluence-EvilJar 配合 CVE-2023-22515 后台上传jar包实现RCE git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell http://confluence.local/plugins/servlet/testbin/cmServlet 哥斯拉webshell连接方式 http://confluence.local/plugins/servlet/testbin/gzServlet...
CVE-2023-22518
CVE-2023-22518 Verificador de las vulnerabilidades críticas CVE-2023-22518 y CVE-2023-22515 en Confluence. Descripción Este script está diseñado para verificar y explotar vulnerabilidades en instancias de Atlassian Confluence. Comprueba la vulnerabilidad CVE-2023-22518 y explota la vulnerabilidad...
CVE-2023-22515
Script de explotación de CVE-2023-22515 Versiones afectadas 8.0.0=Atlassian Confluence=8.5.1 Explotación de la vulnerabilidad python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...
CVE-2023-22515
CVE-2023-22515 Confluence Data Center & Server 权限提升漏洞 Exploit 使用方法 python3 CVE-2023-22515.py url username password 免责声明 检测工具仅供各大安全公司的安全测试员安全测试使用。未经允许请勿对任何外部计算机系统进行入侵攻击，不得用于任何非授权形式的安全测试。仅提供技术交流，不对工具造成任何理论上的或实际上的损失承担责任。...
cve-2023-22515
Este repositorio no tiene un README...
SOC235---Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515
EVENTID-197 field| Value ---|--- EventID| 197 Event Time| Nov, 09, 2023, 09:47 AM Rule| SOC235 - Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515 Level| Security Analyst Hostname| Confluence Data Center Destination IP Address| 172.16.17.234 Source IP Address| 43.130.1.222 HTTP...
Exploit-CVE-2023-22515
Exploit CVE-2023-22515 Un exploit de script bash simple para CVE-2023-22515. Información Las instancias de Confluence Data Center y Server tienen una vulnerabilidad de control de acceso roto CVE-2023-22515, que permite a los atacantes crear cuentas de administrador de Confluence no autorizadas y...
cve-2023-22515-exp
cve-2023-22515-exp cve-2023-22515的python利用脚本 参数如下: -h, --help show this help message and exit -H HOST, --host HOST 指定url -U USERNAME, --username USERNAME 指定用户名 -PW PASSWORD, --password PASSWORD 指定密码 -E EMAIL, --email EMAIL 指定邮箱 -P PROXIES, --proxies PROXIES 指定代理 格式socks5://127.0.0.1:10808...
cve-2023-22515-lab
cve-2023-22515-lab Laboratorio de seguridad práctico que demuestra CVE-2023-22515 — Bypass de autenticación en Atlassian Confluence utilizando un entorno vulnerable simulado...
LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197
LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an...
Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...
Atlassian Confluence Data Center And Server Authentication Bypass
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...
Atlassian Confluence Data Center and Server - Authentication Bypass Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...
