cve-2018-15133

POC - CVE-2018-15133 Usage: root@kitploit: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sitio web de Laravel, codificada en base64 -URL string URL del sitio web de Laravel a atacar -command string Comando a ejecutar en el sitio web vulnerable; si no se...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

CVE-2021-3129

CVE-2021-3129 Unauthenticated RCE in Laravel Ignition via File Upload Summary of the CVE In affected versions of Laravel Ignition a attack can execute arbitrary code because of the insecure usage of filegetcontents and fileputcontents. This is only exploitable for websites that use debug mode...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

laravel-exploits

laravel-exploits Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce Usage root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar...

exploit_laravel_cve-2018-15133

Laravel exploit for CVE-2018-15133 This code exploit CVE-2018-15133 and it is based on kosmiz's PoC and Metasploit's exploit for this vulnerability. I pretty much just did this for a box in Hack The Box, because I did not want to use Metasploit at the moment and as a excuse for practicing Python...

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python exploit script for CVE-2021-3129, a remote code execution vulnerability in Laravel when the Ignition package is installed. This vulnerability allows an attacker to execute arbitrary system commands via PHAR deserialization. Features...

CVE-2024-55555

Laravel Crypto Killer Mass Scanner CVE-2024-55555 This script performs a mass scan of Laravel-based applications vulnerable to CVE-2024-55555, an unauthenticated remote code execution RCE vulnerability in Invoice Ninja. It automates the process of detecting sites using weak or known APPKEY values...

laravel-threat-detection

Laravel Threat Detection...

laravel-crypto-killer

Laravel crypto killer 一款旨在利用 Laravel 应用中解密机制错误实现的工具。 该工具最初设计用于针对 Illuminate\Encryption 包中 Laravel decrypt 函数构造 payload。 它也可以用于解密通过 encrypt 或 encryptString 加密的任何数据。 该工具需要有效的 APPKEY 才能使用；如果你认为可能存在密钥重用（例如来自公共项目），也可以尝试暴力破解。 工具作者：@remsio @Kainx42。 用法 每个选项都可以使用帮助信息来操作该工具： root@kitploit: $...

CVE-2021-3129

远程代码执行：Laravel（CVE-2021-3129） 📜 描述 该脚本用于利用多个 Laravel 版本中存在的远程代码执行（RCE）漏洞，即 CVE-2021-3129。通过利用此漏洞，脚本允许用户对运行存在漏洞的 Laravel 实例的目标网站写入并执行命令，前提是 ".env" 文件中的 "APPDEBUG" 配置设置为 "true"。 感谢大家的所有 GitHub 星标！❤️ 非常感谢大家的支持！🚀 📚 目录 📜 描述 🛠️ 安装 ⚙️ 使用方法 🐋 Docker 概念验证 💻 示例 🩹 补丁选项 🕵🏼 参考资料 📢 免责声明 🛠️ 安装 !NOTE...

vapi

vAPI vAPI 是一个脆弱性敌对编程接口，它是一个可自行托管的 API，以练习形式模拟 OWASP API Top 10 场景。 要求 PHP MySQL PostMan MITM Proxy 安装（Docker） root@kitploit: docker-compose up -d 安装（手动） 复制代码 root@kitploit: cd root@kitploit: git clone https://github.com/roottusk/vapi.git 设置数据库 将 vapi.sql 导入 MySQL 数据库 在 vapi/.env 中配置数据库凭据 启动 MySQL...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

laravel-rce-cve-2018-15133

laravel-rce-cve-2018-15133 CVE-2018-15133...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 一键 getshell 用法 python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 成功以后使用哥斯拉链接即可。...

CVE-2021-43503

警告 该漏洞已被撤销 Override 这是关于 CVE-2021-43503 的内容，我无法通过 exp 重现此漏洞。 需求 PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$c; namespace Mockery class ClosureWrapper private $closure; public function...

laravel-phpunit-rce-masscaner

Laravel phpunit RCE 批量扫描器 CVE-2017-9841 针对 Laravel phpunit RCE CVE-2017-9841 的批量扫描器 依赖 root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt 使用方法 root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help...

Laravel Filemanager v2.5.1 - Local File Inclusion

Laravel Filemanager aka UniSharp through version 2.5.1 is vulnerable to local file inclusion via download?workingdir=%2F. id: CVE-2022-40734 info: name: Laravel Filemanager v2.5.1 - Local File Inclusion author: arafatansari severity: medium description: | Laravel Filemanager aka UniSharp through...