Hadoop-Yarn-ResourceManager-RCE

취약점 영향 Hadoop yarn ResourceManager에 인가되지 않은 접근 취약점이 있었습니다. 이 취약점은 Hadoop의 핵심 구성 요소인 Hadoop yarn에 존재했습니다. Hadoop yarn은 기본적으로 RPC 서비스를 공개적으로 개방했기 때문에, 원격 공격자가 이 인가되지 않은 취약점을 악용하여 RPC 서비스를 통해 임의의 명령을 실행하고 대상 서버를 제어할 수 있었습니다. 이 취약점은 위험도가 높고 피해가 크며, 상세 정보가 이미 공개되어 공격자에 의해 악용되었으므로, Apache Hadoop을 사용하는 ...

WordpressPingbackPortScanner

WordpressPingbackPortScanner Wordpress는 다른 블로그 게시물에 링크하기 위해 소위 Pingback API를 노출합니다. 이 기능을 사용하면 이 서버를 통해 인트라넷 또는 인터넷의 다른 호스트를 스캔할 수 있습니다. 또한 이 기능을 일종의 분산 포트 스캐닝에 사용할 수 있습니다: 이 API를 노출하는 여러 Wordpress 블로그를 사용하여 단일 호스트를 스캔할 수 있습니다. 이 문제는 Wordpress 3.5.1에서 수정되었습니다. 이전 버전은 XML-RPC 인터페이스가 활성화된 경우 취약합니다...

EXPLOIT-CVE-2026-8832

EXPLOIT CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

Kage

Kage Kage ka-geh is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter. Getting Started Please follow these instructions to get a copy of Kage running on your...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

XML-RPC Server - Remote Code Execution

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisor namespace lookups. id: CVE-2017-11610 info: name: XML-RPC Serve...

CVE-2023-49070

ofbiz-xmlrpc-rce CVE-2023-49070 Apache OFBiz XML-RPC 预认证反序列化 RCE 的 PoC，编号为 CVE-2023-49070：一条认证绕过路径解锁了遗留的 /webtools/control/xmlrpc 端点，该端点会反序列化攻击者 通过 XML-RPC 参数夹带的受控 Java 对象。 ⚠️ 仅供授权安全测试使用。 仅可对您拥有或获得明确授权测试的 系统运行此工具（CTF/实验环境、已签署授权范围的渗透项目等）。 未经授权访问计算机系统在大多数司法管辖区均属违法。 漏洞 Apache OFBiz 的 view-map 认证通常会保护...

ToRat

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. DISCLAIMER USE FOR EDUCATIONAL PURPOSES ONLY Wiki How to use ToRat Docker Image Preview Client Commands Command| Info ---|--- cd| change the working...

EUVD-2026-91134

Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single...

EUVD-2026-91135

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames up to 1 MB to the handshake RPC port, filling the...

CVE-2026-103760

Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single...

CVE-2026-103761

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames up to 1 MB to the handshake RPC port, filling the...

xmlrpc-brute

WordPress XML-RPC Bruteforce Tool A tool designed to test WordPress sites for XML-RPC vulnerabilities by attempting to brute force user credentials through the XML-RPC interface. Description This tool tests WordPress installations for XML-RPC authentication vulnerabilities. It can perform standar...

CVE-2025-33073-checker

CVE-2025-33073 체커 스크립트 이 간단한 PoC 체커 스크립트는 samba RPC를 통한 NTLM 인증 강제coercion를 이용해 NTLM 리플렉션reflection 공격을 시도함으로써 CVE-2025-33073 취약점에 대해 대상을 테스트합니다. 이를 위해서는 samba에 접근 권한이 있는 계정이 필요합니다. 또한 아래 내부 Windows DNS에 설명된 대로 localhost1UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAwbEAYBAAAA 도메인을 공격자 IP에 등록해야 합니다. 이 기능은 기본적...

CVE-2026-103761

The Mooncake transfer engine (versions prior to 0.3.14 ) contains a memory exhaustion vulnerability located in the TransferMetadata::receivePeerNotify function. An unauthenticated attacker can cause the process memory to grow without limit by repeatedly sending notify frames (up to 1 MB) to the h...

CVE-2026-103761 Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames up to 1 MB to the handshake RPC port, filling the...

CVE-2026-103760 Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write

Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single...

CVE-2026-103760

The Mooncake transfer engine (versions prior to 0.3.14 ) is susceptible to a denial of service (DoS) vulnerability. An unauthenticated remote attacker can block the handshake daemon by sending a Metadata request to the handshake RPC port and failing to read the replies. This action stalls the sin...