33 matches found
CVE-2024-36401_Geoserver_RCE_POC
Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...
geoserver-
GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...
GeoServer-Tools-CVE-2024-36401
GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 Graphical Exploitation Tool, supports exploitation across various JDK versions, as well as echo and memory shell implementation. Affected versions: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recently during HW Red/Blue team...
CVE-2024-36401
CVE-2024-36401 This is a program for checking the vulnerability of CVE-2024-36401. Usage First, execute the following command to listen for incoming connections. nc -lvnp 9000 Then, execute the file in another terminal window. python CVE-2024-36401.py --target example.com --targetport 8080 --myip...
GeoServerExploit
GeoServerExploit A vulnerability exploitation tool for GeoServer CVE-2024-36401/CVE-2024-36404 This project was jointly developed by @hony and @wh!te?be6ar. If you find this project helpful, please don't forget to give it a 🌟Star to show your support. Thank you. Usage Example Acknowledgements...
CVE-2024-36401
CVE-2024-36401: GeoServer Unauthenticated Remote Code Execution Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401. Installation git clone https://github.com/RevoltSecurities/CVE-2024-36401.git cd CVE-2024-34102 pip install...
CVE-2024-36401-WoodpeckerPlugin
CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...
CVE-2024-36401
CVE-2024-36401 Usage python3 exploit.py Enter host e.g., https://example.com/: https://target.com/ Enter IP: Your IP Public/Host Ngrok Enter Listing Port: Your Port Listen...
CVE-2024-36401
GeoServer Blind Remote Code Execution Vulnerability CVE-2024-36401 options: -h, --help show this help message and exit -u URL, --url URL Target URL; Example: python .py -u http://ip:port -f FILE, --file FILE Target urllist; Example: python .py -f urllist.txt -c CMD, --cmd CMD Target command;...
CVE-2024-36401-PoC
CVE-2024-36401-PoC This repository contains a Proof of Concept PoC script for CVE-2024-36401, a vulnerability that can be exploited to gain remote code execution on the target server. Features Assign a reverse shell listener using Perl. Encode commands using Base64. Make requests to the target...
cve-2024-36401-security-simulator
CVE-2024-36401 Security Incident Analysis & Detection Simulator A Python-based educational simulator that models a fictional network-security incident inspired by the real-world exploitation of CVE-2024-36401. The project demonstrates how vulnerability management, network segmentation, least...
CVE-2024-36401-MASS
This repository does not have a README...
Exploit for Code Injection in Geoserver
CVE-2024-36401 GeoServer Exploit Tool Vulnerability Descri...
Exploit for Code Injection in Geoserver
CVE-2024-36401 Usage bash python3 e...
Exploit for Code Injection in Geoserver
CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...
Exploit for Code Injection in Geoserver
CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
Exploit for Code Injection in Geoserver
CVE-2024-36401 vulnerability graphical exploitation t...