EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It demonstrates the real-world impact of CWE-327 Use of a Broken or Risky Cryptographic Algorithm present in the ES File Explorer applicatio...

CVE-2019-6447

️⃣ CVE-2019-6447 🖥️ -h3x0v3rl0rd- ES File Explorer 4.1.9.7.4 - Arbitrary File Read...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 This is a very simple implementation in bash of the CVE-2019-6447 PoC. It basically uses curl to send the requests with the right parameters. I've built it as I was looking for a similar script during a CTF and couldn't find any. You can play around wi...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer This repository is developed to understand CVE-2019-6447...

ES-File-Explorer-Open-Port-Vulnerability---CVE-2019-6447

This repository does not have a README...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

Exploit for Missing Authentication for Critical Function in Estrongs Es_File_Explorer_File_Manager

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service...

ES File Explorer CVE-2019-6447 detection

Detects the unauthenticated ES File Explorer HTTP API on TCP 59777 CVE-2019-6447. Sends getDeviceInfo and fingerprints responses from affected builds = 4.1.9.7.4. !/usr/bin/env python3 -- coding: utf-8 -- import ast import json from typing import Optional, Union from kittysploit import from...

ES File Explorer <= 4.1.9.7.4 - Arbitrary File Read

CVE-2019-6447 — ES File Explorer exposes an unauthenticated HTTP API on TCP 59777 that allows listing device content and arbitrary file download via the getFile command. !/usr/bin/env python3 -- coding: utf-8 -- import ast import json from pathlib import Path from typing import Optional, Union fr...

CVE-2019-11380

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage...

EUVD-2015-1982

Malware in sbrugna...

EUVD-2014-2023

Malware in sbrugna...

EUVD-2019-17735

Malware in sbrugna...

EUVD-2012-0358

Malware in sbrugna...

EUVD-2019-3058

Malware in sbrugna...

CVE-2019-8345

The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL...

CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function...