CrushFTP-CVE-2024-4040-illdeed

CVE-2024-4040 — CrushFTP 身份验证绕过漏洞利用 本仓库包含一个隐蔽的 Python 概念验证（PoC）漏洞利用程序，针对 CVE-2024-4040 ，这是 CrushFTP（v10 及以下版本）中的一个关键漏洞，允许攻击者使用伪造的 CrushAuth cookie 和 AWS 风格的 Authorization 标头绕过身份验证。 🚨 漏洞摘要 未经身份验证的攻击者可以通过构造特定的 cookie/标头组合，绕过存在漏洞的 CrushFTP 实例的身份验证，从而未经授权访问内部 Web 功能。 CVE ID ：CVE-2024-4040 严重性 ：严重（CVS...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI 概念验证 仅供教育和授权实验室环境使用。 CS443 软件与系统安全 — 受控本地 Docker 环境。 漏洞摘要...

CrushFTP-cve-2024-4040-poc

CrushFTP-cve-2024-4040-poc...

CVE-2024-4040

此存储库没有 README。...

CrushFTP-CVE-2024-4040-Proof-of-Concept

CVE-2024-4040 漏洞 — CrushFTP SSTI / LFI 概念验证 仅用于教育和授权的实验室环境。 适用于 CS443 软件与系统安全模块。实验在受控的本地 Docker 环境中进行。 漏洞摘要...

CVE-2024-4040

CVE-2024-4040 CVE-2024-4040 のエクスプロイト...

Exploit for Code Injection in Crushftp

CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For...

Exploit for Code Injection in Crushftp

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...

Exploit for Path Traversal in Lakernote Easyadmin

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...

Exploit for Code Injection in Crushftp

EN GenCrushSSTIExploit is a PoC exploit tool targeting the...

Exploit for Code Injection in Crushftp

CVE-2024-4040 A server side template injection vulnerability i...

Exploit for Code Injection in Crushftp

CVE-2024-4040: CrushFTP File Read Vulnerability Overview...

CrushFTP Zero-Day Exploitation Due to CVE-2024-4040

Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: 9.x versions before 10.7.1 11.1.0 The CVSS score is 9.8. The vulnerability allows remote attackers to bypass the VFS...

Exploit for Code Injection in Crushftp

Exploit Code for CVE-2024-4040 Overview This exploit code t...

Exploit for Code Injection in Crushftp

CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi...

CrushFTP < 10.7.1 / 11.x < 11.1.0 Sandbox Escape (CVE-2024-4040) (Direct Check)

Binary data crushftpcve-2024-4040.nbin...

Exploit for Code Injection in Crushftp

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This...

Exploit for Code Injection in Crushftp

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This...

Exploit for Code Injection in Crushftp

CVE-2024-4040 A server side template injection vulnerability i...

Exploit for Code Injection in Crushftp

It is an exploit module targeting Apache Log4j. The target produ...