WSMan-WinRM

WSMan-WinRM A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a POST request to /wsman with the content of payload.xml and only change the command with your desired one, AS POC, only id command is executed. Source: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Follow if you like :...

ProxyShell

ProxyShell Install git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Usage python3 exploit.py...

EUVD-2013-3554

Malware in sbrugna...

Exploit for CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a PO...

WSMan-WinRM - A Collection Of Proof-Of-Concept Source Code And Scripts For Executing Remote Commands Over WinRM Using The WSMan.Automation COM Object

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) firmware affect Supermicro X9 generation motherboards (before 3.15, SMT_X9_315) and Supermicro X8 generation motherboards (before SMT X8 312). Root cause: credentials stored in firmware expose remote management access...

PT-2020-7452

Name of the Vulnerable Software and Affected Versions: Supermicro X9 generation motherboards versions prior to 3.15 SMT X9 315 Supermicro X8 generation motherboards versions prior to SMT X8 312 Description: The issue concerns hardcoded WSMan credentials in the Intelligent Platform Management...

Intel Active Management Technology - System Privileges

!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...

OpenSUSE Data Compromise

The multiple vulnerabilities in the openSUSE operating system’s openwsman-devel package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...