24 matches found
CVE-2025-59287-PoC
CVE-2025-59287 / CVE-2023-35317 PoC 在 CVE-2025-59287 内部：WSUS 中的 SoapFormatter RCE：https://shellcode.blog/wsus-cve-2025-59287-investigation/ 本软件纯粹出于学术研究和开发有效防御技术的目的而创建，除非明确授权，否则不得用于攻击系统。项目维护者不对软件的滥用负责。请负责任地使用。 用法 必需标志： --target-url – 目标 WSUS 服务器基础 URL，例如 http://WIN-246JC0TE3BB.vuln.local:8530 --cv...
Windows Server Update Service - Insecure Deserialization
Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...
WSUS-CVE-2025-59287
WSUS-CVE-2025-59287...
wsus_CVE-2025-59287
此存储库没有 README。...
Honeypot-for-CVE-2025-59287-WSUS
wsus-decoy 针对 CVE-2025-59287 WSUS 的防御性概念验证诱饵。该诱饵在 8530 和 8531 端口模拟 WSUS Web 端点，捕获完整的 HTTP 请求体和请求头，存储证据以供取证分析，并包含一个 Windows 测试工具，用于验证端点、文件和进程遥测。它还包含示例检测规则（KQL 和 Suricata）以及一个 Sentinel 剧本模板。 重要提示：本项目严格用于防御目的。它不包含任何漏洞利用代码。仅在隔离的实验环境或分段测试环境中运行。除非您了解相关风险并已部署监控措施，否则请勿将诱饵暴露在生产网络中。 仓库内容 用于将类似 WSUS...
CVE-2025-59287-hawktrace
此存储库没有 README。...
WSUSploit.NET
WSUSploit.NET CVE-2025-59287 的 C PoC 基本上是初始公开 PoC 的移植版本。警告：会破坏 WSUS。 免责声明： 本工具仅用于道德和合法的安全测试、研究与教育。请勿以任何未经授权的方式使用本软件。 防御性考量 按此顺序进行这些 HTTP 调用。更高级的威胁行为者可能会混入随机 HTTP 调用以规避此检测。 IIS 日志路径：C:\inetpub\logs\LogFiles\.log root@kitploit: POST /ReportingWebService/ReportingWebService.asmx POST...
CVE-2025-59287
此存储库没有 README。...
WSUSResponder
🧰 WSUSResponder Versión: 1.0.1 Autor: RZA / IT Operations Licencia:MIT 🎯 Objetivo El módulo WSUSResponder proporciona un conjunto de herramientas PowerShell para responder rápidamente a la vulnerabilidad crítica CVE-2025-59287 , una falla de ejecución remota de código RCE que afecta a Windows...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploi...
Metasploit Wrap-Up 11/14/2025
It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...
Exploit for Deserialization of Untrusted Data in Microsoft
🚨 ALERTA CRÍTICA DE CIBERSEGURIDAD: RCE en WSUS CVE-2025-5928...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-59287-WSUS powershell version of hawktrace POC exploi...
Exploit for CVE-2025-59287
CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows...
KB5070882: Windows Server 2016 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070887: Windows Server 2012 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070886: Windows Server 2012R2 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070883: Windows Server 2019 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Circumvention of a security measure - Manipulation of data - Execution of arbitrary code user privilege...
