cve-2022-31705

CVE-2022-31705 Intro https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Test on windows vmware workstation 16.2.0, with guest os ubuntu server 22 At leat one usb device is be attached to guest machine change the 'qh-field4' in the ehci.c...

VMware_ESXI_OpenSLP_PoCs

VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Tested on ESXI installed on VMware Workstation. If on real mechine, you may need to change the srvtype field service:VMwareInfrastructure...

vcenter-log4j

Solución para VMware vCenter log4j Script para solucionar la vulnerabilidad log4j de VMware vCenter CVE-2021-44228, según el artículo de KB de VMware. 2021-12-13 02:09 UTC - Añadido servicios de Token Seguro y Gestión de Identidad 2021-12-13 12:46 UTC - Añadido PSC Client para 6.5 - ver abajo...

CVE-2021-21972

VMware vCenter Server RCE — CVE-2021-21972 Research Lab Author: Niranjan Pokhrel Independent research project reproducing and documenting a critical, publicly disclosed VMware vCenter Server vulnerability in an isolated home lab, to understand the vulnerability class, exploitation path, and...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

Vmware-ESXI

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors. Download ESXIVORTEX Details: an authentication bypass which leads to shell upload in context of vpxuser leading to full administrative permission on domain-joined ESXI hypervisors. in order to...

libvmdk

libvmdk is a library to access the VMware Virtual Disk VMDK format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read supported extent file formats: RAW flat COWD version 1 sparse VMDK version 1, 2 and 3 sparse Supported VMDK format features: delta links grain compression as of...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

VMInjector

V M I n j e c t o r root@kitploit: c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description:...

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

CVE-2022-22980

CVE-2022-22980 A local based poc of CVE-2022-22980, for the detail of this vulnerability see https://tanzu.vmware.com/security/cve-2022-22980. You need to install mongodb on locahost before running. And I've create a web based poc with docker on dockerv Run root@kitploit: mvn spring-boot:run or...

vcenter_rce

vcenterrce Exploit，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），upload 冰蝎3，getshell Usage： python3 vcenterrce -u url...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

cis-vsphere

🦍 CIS vSphere Una herramienta para evaluar el cumplimiento de un entorno VMware vSphere con respecto al CIS Benchmark para VMware vSphere. Requisitos VMware PowerCLI 12.0.0 o superior VMware vSphere 7.0 Acceso de lectura al vCenter o host ESXi Uso 1. Clona el repositorio y navega a la carpeta:...

CVE-2021-21972

Check CVE-2021-21972 CVE-2021-21972 vCenter-6.5-7.0 RCE POC...

CVE-2021-21972

CVE-2021-21972 Nmap script to check vulnerability CVE-2021-21972 - vCenter Server RCE Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21972 https://www.vmware.com/security/advisories/VMSA-2021-0002.html Example nmap -p443 --script cve-2021-21972.nse --script-args...

vcsa-hardening-tool

VCSA Hardening & Logging Tool An automated hardening script for the VMware vCenter Server Appliance VCSA designed to enforce Zero Trust network segmentation and deep forensic auditing. This tool is engineered to mitigate critical risks associated with advanced persistent threats APTs and...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

CVE-2022-22954

Analysis of CVE-2022-22954 Overview Workspace ONE Access workspace delivery as a service model provides multi-factor authentication, single sign-on, and conditional access for SaaS, web, and mobile applications. CVE-2022-22954 is a Server-side Template Injection vulnerability existing in the...