CVE-2011-2523

CVE-2011-2523 - Exploit vsftpd 2.3.4 Descrizione Very Secure FTP Daemon vsftpd è un server FTP per piattaforme Unix-like, inclusi i sistemi Linux. È distribuito sotto i termini della GNU General Public Licence. Supporta IPv6 e SSL. Nel luglio 2011 è stato rivelato che la versione 2.3.4 di vsftpd,...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Demo di Laboratorio Questo repository contiene un proof-of-concept exploit per CVE-2024-5084, una vulnerabilità trovata nel plugin WordPress Hash Form. È destinato solo all'apprendimento, ai test di laboratorio e alla ricerca sulla sicurezza. 📌 Sulla Vulnerabilità ID CVE:...

CVE-2011-2523

CVE-2011-2523 - Exploit vsftpd 2.3.4 Descrizione vsftpd, che sta per Very Secure FTP Daemon, è un server FTP per sistemi Unix-like, incluso Linux. È concesso in licenza sotto GNU General Public License. Supporta IPv6 e SSL. Nel luglio 2011, è stato scoperto che la versione 2.3.4 di vsftpd...

CVE-2020-27955

Reproduktion der Schwachstelle CVE-2020-27955 1. Auf dem Windows-Rechner die verwundbare Version von Git-LFS herunterladen. Download-Link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. Auf dem Windows-Rechner installieren und die folgenden Informationen zur Hosts-Datei...

vsftpd-234-vuln-report

💥 vsftpd 2.3.4 Backdoor-Exploit-Bericht Ausnutzung einer bekannten Schwachstelle in vsftpd 2.3.4 mit Metasploit. 📌 Zielinformationen Ziel-IP: 192.168.150.133 Dienst: FTP Angreifbare Version: vsftpd 2.3.4 Exploit-Modul: exploit/unix/ftp/vsftpd234backdoor Payload: Command Shell TCP 🔍...

CVE-2023-31702

CVE-2023-31702 — Iniezione SQL nella eScan Management Console Autenticata Panoramica CVE-2023-31702 è una vulnerabilità di iniezione SQL autenticata scoperta in MicroWorld Technologies eScan Management Console versione 14.0.1400.2281. La vulnerabilità è presente nell'endpoint GetUserCurrentPwd,...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit, um einen neuen Admin-Benutzer zu erstellen Kompromittiertes Audit-Log: Als Referenz diente: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html und https://github.com/Chocapikk/CVE-2023-225...

Malicious code in pfp-block-independent-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2145fdce1d6879c4b5bd3682bf9b8e7c386f3f80f15721c26fe6bd2638564185 On require of the package, index.js loads bootstrap.js, which selects a platform-specific payload path, fetches bytes from one of four...

Shescape: Shell injection via unescaped parentheses on Windows with CMD

Impact This impacts users of Shescape on Windows that explicitly configure shell to CMD, or true with the default shell being CMD, using the escape and escapeAll APIs. An attacker may be able to achieve shell injection depending on the original command. javascript import as cp from...

FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Bind TCP Stager (No NX or Win7)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection No NX Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows x64 Command Shell, Windows x64 IPv6 Bind TCP Stager with UUID Support

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Listen for an IPv6 connection with UUID Support Windows x64 Module Options This module requires Metasploit: https://metasploit.com/download Current source:...

FTP Fetch, Windows Command Shell, Reverse TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Windows x86 Bind Named Pipe Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a pipe connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

FTP Fetch, Windows Command Shell, Hidden Bind Ipknock TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get yo...

FTP Fetch, Windows Command Shell, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection Windows x86 Module Options...

FTP Fetch, Windows Command Shell, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection with UUID Support Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

FTP Fetch, Windows Command Shell, Reverse TCP Inline

Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a command shell Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Find Tag Ordinal Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Use an established connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...