openam-CVE-2021-35464

openam CVE-2021-35464 tomcat 执行命令回显. 项目基于 ysoserial 和 Java-Rce-Echo 构建项目需要在依赖中加入ysoserial.jar和jato-14.6.3.jar root@kitploit: POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like...

CVE-2020-10199

CVE-2020-10199 Versión de eco, error no probado escrito rápidamente root@kitploit: Usage: python http://127.0.0.1:8080 username password Referencia: https://www.cnblogs.com/magic-zero/p/12641068.html...

CVE-2023-30212

CVE-2023-30212 利用 Ourphp 7.2.0 版本中的漏洞，也称为 CVE-2023-30212 步骤 1. 在您的系统中下载并安装 Docker （注意）我使用 Docker 是因为它快速且易于安装 Ubuntu。 步骤 2. 设置 Docker 环境 root@kitploit: docker pull ubuntu docker run -d -t –name test-container -p 80:80 -p 443:44 3 -p 3306:3306 -p 21:21 ubuntu Docker exec -it test-container bash 步骤 ...

CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。 需要模块：requests、http.client （工具仅用于授权的安全测试，请勿用于非法使用，违规行为与作者无关。） 命令回显模块已知成功版本：12.2.1.3.0、12.2.1.4.0、14.1.1.0.0 选项 功能一：命令回显 python3 CVE-2020-14882ALL.py -u http://1.1.1.1:7001 -c "net user" python3 CVE-2020-14882ALL.py -u...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

GeoServer-Tools-CVE-2024-36401

GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现 影响版本： GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 近期HW发现该漏洞还是很常见的，但一直没有一个顺手的工具，这里参考：https://github.com/whitebear-ch/GeoServerExploit 的思路重新写了这份工具 0x01 安装 构建工件即可 0x02 使用 JDK8启动：java -jar...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

mosh

Mosh：移动 Shell Mosh 是一个远程终端应用，支持间歇性连接、允许漫游，并提供用户按键的推测性本地回显和行编辑。 它旨在支持 SSH 的典型交互式使用场景，此外： Mosh 在客户端休眠或稍后唤醒、或暂时失去网络连接时保持会话活跃。 Mosh 允许客户端和服务器“漫游”并更换 IP 地址，同时保持连接存活。与 SSH 不同，Mosh 可在 Wi-Fi 网络之间切换、或从 Wi-Fi 切换到蜂窝数据再到有线以太网时使用。 Mosh...

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947批量检测脚本，回显命令没进行正则，大佬们先用着，后续再更 将脚本路径下放上url.txt 直接执行python 脚本.py 演示： 检测完成之后会生成一个成功的txt 该脚本会将代码进行注入，刷新路由，回显命令，删除注入命令，大佬们勿喷，有什么bug明天解决...

Log4j2-RCE

Log4j2-RCE Log4j2 CVE-2021-44228 复现和回显利用...

pyc2

pyc2 c2 simple escrito en python2 para demostrar conceptos de seguridad. Utiliza peticiones y respuestas de eco ICMP para intercambiar comandos y respuestas codificadas en base64. Video explicando algunos de los conceptos de seguridad y decisiones de implementación:...

CVE-2023-5044

CVE-2023-5044 PoC para CVE-2023-5044 Prerrequisitos Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Dale a Docker los privilegios correctos root@kitploit: sudo usermod -aG docker $USER && newgrp docker Inicia el clúster con extraPortMaping y node-labels para prepararlo para un ingress...

cve-2021-44228-helpers

CVE-2021-44228 Ayudantes Ayudantes, ejemplos y exploits para cve-2021-44228. Artículo de blog asociado: https://blog.uint0.dev/cve-2021-44228/ Ayudantes Cámara de eco cd echochamber Registra la entrada mediante log4j. Construir : ./gradlew build Ejecutar : ./gradlew run --console=plain Servidor d...

EulerOS Virtualization 2.11.1 : iputils (EulerOS-SA-2026-3423)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo...

EulerOS Virtualization 2.11.0 : iputils (EulerOS-SA-2026-3510)

According to the versions of the iputils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo...

CVE-2020-14882-GUI-Test

CVE-2020-14882-GUI 刚接触了qt框架，所以这是一个学习QT开发框架的产物，目前存在回显接收不全等等其他问题，仅测试使用。...

CVE-2026-88592

kkFileView = 4.2.0 is vulnerable to Server-Side Request Forgery SSRF. The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host whitelist. However, the URL parameter validated by the filter is not the same parameter the controller actually fetches: t...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 远程代码执行回显验证 我们团队对此次 CVE-2017-7269 漏洞的分析报告: https://ht-sec.org/cve-2017-7269-vulnerabilities/ 默认PoC 只能弹calc.exe ,现在修改成可以响应请求,命令格式为: CVE-2017-7269remoteecho.py ipaddress port 效果如下:...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179178a: Fixed out-of-bounds accesses in RX fixup The ax88179rxfixup function contains several out-of-bounds accesses that can be triggered by a malicious or defective USB device. Specifically: - The metadata array...