CVE-2024-3400-Checker

Palo Vulnerability Check - CVE-2024-3400 Visão Geral Este script foi projetado para verificar sinais de comprometimento em sistemas Palo, especificamente para a vulnerabilidade identificada como CVE-2024-3400. Ele pesquisa em arquivos de pacote de suporte técnico gz ou .tgz por entradas de log...

CVE-2025-0133-exploit

CVE-2025-0133 Scan Ein in Python geschriebenes Skript, um das Vorhandensein einer CVE-2025-0133 Reflected Cross-Site Scripting-Schwachstelle zu überprüfen, die in Palo Alto auftritt. Die Datei getconfig.esp wird erkannt und mit dem angegebenen Skript auf XSS getestet. Verwendung: root@kitploit:...

Unit42-timely-threat-intel

Unit42-Timely-Threat-Intel Dieses Repository enthält Dateien mit Indikatoren, die Social-Media-Beiträge unterstützen, die dazu dienen, aktuelle Bedrohungsinformationen des Unit-42-Teams von Palo Alto Networks zu verbreiten. Diese Informationen werden der Öffentlichkeit „as is“ zur Verfügung...

CVE-2024-0012-POC

Dies ist ein echter POC, inspiriert von https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Verwendung wie - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify wenn SSL nicht funktioniert oder abgelaufen...

SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

SOC274 - Palo Alto Networks PAN-OS कमांड इंजेक्शन लैब अवलोकन यह रिपॉजिटरी SOC274 लैब अभ्यास के लिए सहायक सामग्री रखता है, जो Palo Alto Networks PAN-OS कमांड इंजेक्शन भेद्यता पर केंद्रित है। लैब वॉकथ्रू इस Let's Defend SOC लैब के विस्तृत वॉकथ्रू के लिए, कृपया देखें: SOC274 लैब वॉकथ्रू सामग्री...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS-Befehlseinschleusung senden Sie diese HTTP-Anfrage: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...

CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Beschreibung Dieses Proof-of-Concept PoC-Skript zielt auf Schwachstellen in Palo Alto PAN-OS ab, speziell CVE-2024-0012 und CVE-2024-9474 , indem es den Ausnutzungsprozess automatisiert, einschließlich Authentifizierungsumgehung,...

CVE-2024-3400

Script de Exploração de Firewall PAN-OS Este script foi projetado para demonstrar a exploração de vulnerabilidades em firewalls PAN-OS. Ele envia um payload especialmente elaborado para o endpoint de API do firewall para executar comandos arbitrários. Esta exploração visa especificamente a...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine a Versão em Execução no Firewall Palo Alto Networks para o Portal Global Protect Recentemente, muitas vulnerabilidades críticas foram anunciadas pela Palo Alto Networks aqui: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date Este é um P...

CVE-2024-9474

CVE-2024-9474 Palo Alto PAN-OS भेद्यता के लिए PoC आवश्यकताएँ किसी विशेष आवश्यकता की आवश्यकता नहीं है, केवल python3 और मानक पुस्तकालय उपयोग root@kitploit: python3 cve.py --help root@kitploit: python3 cve.py -u URL श्रेय https://github.com/Chocapikk/CVE-2024-9474...

CVE-2025-0133

CVE-2025-0133 Palo Alto PAN-OS GlobalProtect 게이트웨이 및 포털의 getconfig.esp 핸들러에서 발견된 반사형 XSS 취약점입니다. user 쿼리 매개변수가 Captive Portal 페이지에 인코딩되지 않고 반영됩니다. 인증된 GlobalProtect 사용자를 조작된 링크로 유인한 공격자는 기업 VPN 포털의 신뢰 컨텍스트에서 JavaScript를 실행할 수 있으므로 피싱 캠페인이 훨씬 더 효과적이게 됩니다. 2025년 5월에 공개되었습니다. PAN-SA-2025-0005에서...

CVE-2025-0108-PoC

CVE-2025-0108 Prova de Conceito PoC Este repositório contém uma Prova de Conceito PoC para a vulnerabilidade CVE-2025-0108 , que é um problema de bypass de autenticação no software PAN-OS da Palo Alto Networks. Os scripts fornecidos aqui testam a vulnerabilidade enviando uma requisição HTTP...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

Palo Alto Expedition - Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. id: CVE-2024-5910 info: name: Palo Alto Expedition - Admin Account Takeover author: johnk3r severity: critical...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

cve-2024-0012-gui-poc

CVE-2024-0012 और CVE-2024-9474 प्रबंधन वेब इंटरफेस में प्रमाणीकरण चोरी PAN-SA-2024-0015 और Palo Alto PAN-OS में प्रमाणित कमांड इंजेक्शन। तकनीकी विवरण के लिए ब्लॉग पोस्ट देखें। एक्सप्लॉइट लेखक मूल एक्सप्लॉइट Sonny द्वारा लिखा गया, watchTowr @watchtowrcyber से। कोड और GUI कार्यान्वयन तथा अतिरिक्त...

cs50-cyber-paloalto-oauth

CS50 Cybersecurity Abschlussprojekt Titel: Der Salesloft OAuth-Vorfall & CVE-2024-3400 Auswirkungen auf Palo Alto Autor: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube-Video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Dateien presentation.pdf — Folien script.txt —...

CVE-2024-3400-

PAN-OS फ़ायरवॉल कमांड इंजेक्शन भेद्यता इस रिपॉजिटरी में एक Go स्क्रिप्ट है जो Palo Alto Networks के PAN-OS ऑपरेटिंग सिस्टम को चलाने वाले फ़ायरवॉल में एक कमांड इंजेक्शन भेद्यता का शोषण करती है। यह भेद्यता, जिसे CVE-2024-3400 के रूप में पहचाना गया है, एक अप्रमाणित हमलावर को फ़ायरवॉल पर रूट...