CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Esecuzione remota di codice in Pi-hole da SSRF a RCE Descrizione Questo repository contiene uno sfruttamento per CVE-2024-34361, una vulnerabilità critica CVSS 8.6 scoperta in Pi-hole, un sinkhole DNS ampiamente utilizzato per bloccare annunci pubblicitari e domini di tracciamento ...

Gopherus

Gopherus Se conosci un luogo vulnerabile a SSRF, questo strumento ti aiuterà a generare payload Gopher per sfruttare SSRF Server Side Request Forgery e ottenere RCE Remote Code Execution. Ti aiuterà anche a ottenere una reverse shell sul server vittima. E per maggiori informazioni puoi consultare...

Exploit for CVE-2024-34361

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE...

Exploit for CVE-2024-34361

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE...

Mail.ru: SSRF + RCE через fastCGI в POST /api/nr/video

Domain, site, application -- app.nativeroll.tv Steps to reproduce -- 1. Традиционно нужен аксес токен от аккаунта паблишера, можно зарегистрировать здесь https://seedr.ru/register-user/publisher 2. Войти как паблишер https://seedr.ru/login/publisher 3. Поперехватывать запросы, получить токен. 4...

Gopherus

This is an analysis of the provided repository, specifically focusing on the Gopherus tool. Classification: The Gopherus tool is a proof-of-concept exploit for various vulnerabilities, including SSRF Server-Side Request Forgery and RCE Remote Code Execution. Primary Vulnerability: The primary...

SSRFmap - Automatic SSRF Fuzzer And Exploitation Tool

SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to perform...