WSMan-WinRM

WSMan-WinRM Коллекция исходного кода и скриптов для удаленного выполнения команд через WinRM с использованием COM-объекта WSMan.Automation. Предыстория Для получения дополнительной информации обратитесь к следующей записи в блоге: WS-Management COM: Another Approach for WinRM Lateral Movement...

CVE-2021-38647

CVE-2021-38647 Это POC для CVE-2021-38647 : Отправьте POST-запрос на /wsman с содержимым payload.xml и просто измените команду на желаемую. В качестве POC выполняется только команда id. Источник: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Подпишись, если нравится :...

ProxyShell

ProxyShell Установка root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Использование root@kitploit: python3 exploit.py...

EUVD-2013-3554

Malware in sbrugna...

Exploit for CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a PO...

WSMan-WinRM - A Collection Of Proof-Of-Concept Source Code And Scripts For Executing Remote Commands Over WinRM Using The WSMan.Automation COM Object

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) firmware affect Supermicro X9 generation motherboards (before 3.15, SMT_X9_315) and Supermicro X8 generation motherboards (before SMT X8 312). Root cause: credentials stored in firmware expose remote management access...

Intel Active Management Technology - System Privileges

!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openSUSE operating system’s openwsman-devel package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...