OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack 测试环境 vulhub/ofbiz:18.12.09 使用 启动 java -jar OFBiz-Attack.jar 共有三个模块，分别是： 漏洞检测 仅输入目标URL即可，无限额外添加路由，否则影响后续模块利用。仅支持发送Https请求，运行速度取决于Web服务器性能 验证完成后请勿修改URL，后续利用会从此框获取URL 命令执行 使用前需完成漏洞校验，使用的是CVE-2023-51467来执行命令，也方便回显 执行失败会返回Not executed for...

Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz

利用 CVE-2023-49070 和 CVE-2023-51467 攻击 Apache OFBiz 18.12.10 Apache OFBiz 身份验证绕过漏洞 此漏洞利用代码仅用于教育目的和增强网络安全实践。任何用于非法用途的行为完全由您自己负责。建议仅在获得明确授权的环境中使用，以避免任何道德或法律违规。 要执行此漏洞利用，需要下载 ysoserial-all.jar 文件。以下命令可以帮助您完成此操作： wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar 参考资料...

Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-

此存储库没有 README。...

CVE-2023-49070_CVE-2023-51467

CVE-2023-49070CVE-2023-51467 Exploit de CVE-2023-49070 y escáner de vulnerabilidades para CVE-2023-49070 y CVE-2023-51467...

Exploit_CVE-2023-51467

Este repositorio no tiene un README...

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 Apache OFBiz es un sistema de planificación de recursos empresariales de código abierto. Proporciona un conjunto de aplicaciones empresariales que integran y automatizan muchos de los procesos de negocio de una empresa...

cve-2023-51467

Go-Exploit para CVE-2023-51467 Este repositorio contiene un go-exploit para Apache OFBiz CVE-2023-51467. La implementación incluye verificación del objetivo, un escáner de versiones y una reverse shell Nashorn en memoria como payload requiere que el Java en uso admita Nashorn. El proceso de...

CVE-2023-51467

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code...

Exploit for Server-Side Request Forgery in Apache Ofbiz

BadBizness Automatic exploitation scrip...

Exploit for Server-Side Request Forgery in Apache Ofbiz

BadBizness Automatic exploitation scrip...

Exploit for Server-Side Request Forgery in Apache Ofbiz

Go-Exploit for CVE-2023-51467 This repository contains a go-e...

Exploit for Code Injection in Apache Ofbiz

Exploit CVE-2023-49070 and CVE-2023-51467 Apache OFBiz 18.12...

Zero-Day Authentication Bypass Exploit in Apache OFBiz

Summary: CVE-2023-51467 is a critical authentication bypass vulnerability in Apache OFBiz. Exploitation of this vulnerability could result in bypass authentication to achieve a simple Server-Side Request Forgery SSRF or arbitrary code execution. Users are advised to update to Apache OFBiz version...

Exploit for Code Injection in Apache Ofbiz

Apache OFBiz Authentication Bypass Vulnerability CVE-2023-514...

VulnCheck KEV: CVE-2023-51467

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code...

Imperva defends customers against recent vulnerabilities in Apache OFBiz

On December 26, researchers from SonicWall Capture Labs discovered an authentication bypass vulnerability in Apache OFBiz, tracked as CVE-2023-51467. This bug has a CVSS score of 9.8 and allows attackers to achieve server-side request forgery SSRF by bypassing the program’s authentication. This...

Exploit for Server-Side Request Forgery in Apache Ofbiz

CVE-2023-51467 - Apache OFBiz Authentication Bypass This flaw...

Exploit for Server-Side Request Forgery in Apache Ofbiz

CVE-2023-51467 Scanner 🕵️‍♂️ Description 📜 CVE-2023-51467...

Exploit for Server-Side Request Forgery in Apache Ofbiz

CVE-2023-51467 exp.py changed to command execution P...

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

A new zero-day security flaw has been discovered in Apache OfBiz, an open-source Enterprise Resource Planning ERP system that could be exploited to bypass authentication protections. The vulnerability, tracked as CVE-2023-51467, resides in the login functionality and is the result of an incomplet...