SiteCore-RCE-Detection

SiteCore-RCE-Detection Sitecore RCE - CVE-2021-42237 का पता लगाने के लिए Sitecore Experience Platform प्री-ऑथ RCE - CVE-2021-42237 यह Sitecore संस्करण का पता लगाने और Get तथा Post के माध्यम से कमजोर Report.ashx पर अनुरोध करने पर मिलने वाले प्रतिक्रिया पर निर्भर करता है। स्क्रिप्ट एक फ़ाइल लेती है...

Sitecore Experience Platform (XP) Remote Code Execution Exploit

This Metasploit module exploits a deserialization vulnerability in the Report.ashx page of Sitecore XP 7.5 to 7.5.2, 8.0 to 8.0.7, 8.1 to 8.1.3, and 8.2 to 8.2.7. Versions 7.2.6 and earlier and 9.0 and later are not affected. The vulnerability occurs due to Report.ashx's handler, located in...

Sitecore Experience Platform (XP) Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sitecore Experience Platform XP PreAuth Deserialization RCE', 'Description' = %q This module exploits a deserialization vulnerability in the...

Sitecore Experience Platform (XP) PreAuth Deserialization RCE

This module exploits a deserialization vulnerability in the Report.ashx page of Sitecore XP 7.5 to 7.5.2, 8.0 to 8.0.7, 8.1 to 8.1.3, and 8.2 to 8.2.7. Versions 7.2.6 and earlier and 9.0 and later are not affected. The vulnerability occurs due to Report.ashx's handler, located in...