200 matches found
BADministration
BADministration BADministration 是什么？ BADministration 是一款从攻击视角与各类管理或运维应用程序进行交互的工具。它试图为攻防安全人员提供一种能力，用于识别并利用这些非技术性漏洞。一如既往：请用于正当目的，促进安全，并抵制应用程序的肆意传播。 抱歉使用了 python2.7，因为我发现很多厂商 API 只能在 2.7 上运行，而且我还没有足够的经验来混搭不同版本的 Python。 应用隔离（Application Propagation）...
CVE-2021-35215
CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE，需要登录。 PoC root@kitploit: POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1 Content-Type:...
solarflare
solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...
solarflare
solarflare SolarWinds Orion 凭据提取工具 博客文章：https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ 感谢 @asolino、@gentilkiwi 和 @skelsec 帮助我理解 DPAPI。 root@kitploit: ============================================ | 收集 RabbitMQ Erlang Cookie | Erlang Cookie:...
CVE-2020-10148
使用方法&免责声明 该脚本为SolarWinds Orion API 远程代码执行漏洞批量检测脚本（CVE-2020-10148）。 使用方法：Python CVE-2020-10148.py urls.txt urls.txt 中每个url为一行，漏洞地址输出在vul.txt中 影响版本： SolarWinds Orion 2020.2.1 HF 2 及 2019.4 HF 6之前的版本受此漏洞影响。 工具仅用于安全人员安全测试，任何未授权检测造成的直接或者间接的后果及损失，均由使用者本人负责...
CVE-2020-10148-Solarwinds-Orion
CVE-2020-10148 Solarwinds Orion 下载 CVE-2020-10148.py root@kitploit: wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py 在Shodan上寻找Solarwinds Orion root@kitploit:...
CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday said it's retiring 10 emergency directives Eds that were issued between 2019 and 2024. The list of the directives now considered closed is as follows - ED 19-01: Mitigate DNS Infrastructure Tampering ED 20-02: Mitigate...
CVE-2021-27258
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper...
CVE-2021-27277
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...
CVE-2021-31475
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...
CVE-2019-12864
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us=false query parameter...
CVE-2019-12954
SolarWinds Network Performance Monitor Orion Platform 2018, NPM 12.3, NetPath 1.1.3 allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT...
EUVD-2019-7586
Malware in sbrugna...
EUVD-2019-4443
Malware in sbrugna...
EUVD-2019-7585
Malware in sbrugna...
EUVD-2021-15337
Malware in sbrugna...
EUVD-2020-20363
Malware in sbrugna...
EUVD-2010-4793
Malware in sbrugna...