CVE-2019-18935

CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...

UI_CVE-2017-9248

UICVE-2017-9248 Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler...

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

Telewreck

Telewreck A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248. This extension is based on the original exploit tool written by Paul Taylor @bao7uo which is available at https://github.com/bao7uo/dpcrypto. Credits and big thanks to him. A related blog post...

RAU_crypto

RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

Reflected XSS - Telerik Reporting Module

Cross-site scripting vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd. id:...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Overview In Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. Read...

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

CVE_2019_18935

RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 For exploitation to work, you generally need a version with hard coded keys, or you need to know the key, for...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog poc Summary Supported versions? Basically all of them at the time the...

dp_crypto

dpcrypto 基于Base64的加密预言机漏洞利用工具，针对CVE-2017-9248（Telerik UI for ASP.NET AJAX 对话框处理程序） 发布在 exploit-db 上 更新于 2020 年——请注意，exploit-db 上的版本与 GitHub 上的最新版本相比已经非常过时。 https://www.exploit-db.com/exploits/43873/ 另请参阅 我的另一个 Telerik UI 漏洞利用工具（针对 CVE-2017-11317 和 CVE-2017-11357）可能也会引起你的兴趣。可在以下地址获取：...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...

dp_cryptomg

dpcryptomg CVE-2017-9248（Telerik UI for ASP.NET AJAX ダイアログハンドラーの暗号上の脆弱性）を悪用するためのツールです。この脆弱性を悪用すると、任意のファイルをアップロードできるファイルマネージャーユーティリティにアクセスでき、通常はリモートコード実行につながります。 この脆弱性は、Telerik の「DialogParameters」の復号化中にエラーメッセージを介して情報漏洩が発生することに起因します。DialogParameters...

Telerik_CVE-2019-18935

TelerikUI Python 扫描器 telerikrcescan.py 示例 评估IP是否存在CVE-2019-18935漏洞 $ python3 telerikrcescan.py -t 192.168.44.21 评估主机名是否存在CVE-2019-18935漏洞 $ python3 telerikrcescan.py -t vulnerable.telerik.net 评估CIDR网络范围是否存在CVE-2019-18935漏洞 $ python3 telerikrcescan.py -r 23.253.4.0/24 评估目标列表 $ python3...

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

telerik

This repository does not have a README...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog Usage root@kitploit: python CVE-2024-4358.py --target...

CVE-2019-18935

CVE-2019-18935 Proof-of-concept exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX allowing remote code execution. Description Telerik UI for ASP.NET AJAX is a widely used suite of UI components for web applications. It insecurely deserializes JSON objects in a...