WSMan-WinRM

WSMan-WinRM A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

ProxyShell

ProxyShell Install git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Usage python3 exploit.py...

CVE-2021-38647

CVE-2021-38647 これはCVE-2021-38647のPOCです： /wsman に payload.xml の内容をPOSTリクエストとして送信し、コマンドを任意のものに変更してください。 POCとして、id コマンドのみが実行されます。 ソース: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure 気に入ったらフォローを : https://twitter.com/silentgh00st...

EUVD-2013-3554

Malware in sbrugna...

Exploit for CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a PO...

WSMan-WinRM - A Collection Of Proof-Of-Concept Source Code And Scripts For Executing Remote Commands Over WinRM Using The WSMan.Automation COM Object

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) firmware affect Supermicro X9 generation motherboards (before 3.15, SMT_X9_315) and Supermicro X8 generation motherboards (before SMT X8 312). Root cause: credentials stored in firmware expose remote management access...

Intel Active Management Technology - System Privileges

!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openSUSE operating system’s openwsman-devel package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...