sjet

siberas द्वारा sJET siberas JMX एक्सप्लॉयटेशन टूलकिट sJET असुरक्षित रूप से कॉन्फ़िगर की गई JMX सेवाओं का आसान शोषण करने की अनुमति देता है। अतिरिक्त पृष्ठभूमि जानकारी यहाँ और यहाँ पाई जा सकती है। आवश्यक शर्तें Jython 2.7 उपयोग SJET एक CLI इंटरफ़ेस लागू करता है argparse का उपयोग करके: root@kitploit...

mjet

mjet Kit de exploração de extensões de gerenciamento Java JMX da Mogwai Security mjet é uma ferramenta que pode ser usada para explorar serviços JMX configurados de forma insegura. Baseia-se no post do blog "Exploiting JMX-RMI" de Braden Thomas/Accuvant...

mjet

MJET por MOGWAI LABS MOGWAI LABS Kit de Exploração JMX JMX Exploitation Toolkit MJET é um fork do sjet, que foi desenvolvido pela siberas, mas não é mais mantido ativamente. O MJET é mantido pela equipe MOGWAI LABS, que também forneceu a maior parte do código original do sjet. O MJET permite...

Pega Platform 8.1.0 - Remote Code Execution Vulnerability

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat Enterprise 7 CVE : CVE-2022-24082...

Pega Platform 8.7.3 Remote Code Execution Vulnerability

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to uplo...

Pega Platform 8.7.3 Remote Code Execution

Exploit Title: Pega Platform 8.1.0 and higher Remote Code Execution Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.7.3 Tested on: Re...

Apache Mina 2.0.13 - Remote Command Execution

Apache Mina 2.0.13 - Remote Command Execution Source: https://remoteawesomethoughts.blogspot.com/2016/09/apache-mina-2013-remote-command.html Apache Mina 2.0.13 uses the OGNL library in the “IoSessionFinder” class. Its constructor takes into parameter one OGNL expression. Then this expression is...