Gui-poc-test

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432 이 세 가지 취약점에 대한 그래픽 기반 취약점 탐지 및 이용 도구 주의사항 1. jar 실행 시 Java 8 필요 2. 단일 대상 대상, 다중 IP 취약점 스캔에는 적합하지 않음 3. 패키징 시 Weblogic 취약점 이용을 위해 wlfullclient.jar를 참조해야 하며, 직접 추가해야 합니다 Usage java -ja...

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...

Oracle WebLogic IIOP JNDI Lookup RCE Direct Check

Binary data oracleweblogiciiopcve-2020-2551.nbin...

Introducing Periscope: Out-of-Band Vulnerability Detection Mechanism in Qualys WAS

Web applications and REST APIs can be susceptible to a certain class of vulnerabilities that can't be detected by a traditional HTTP request-response interaction. These vulnerabilities are challenging to find but provide a way for attackers to target otherwise inaccessible, internal systems. An...

Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread Ransomware

Taking advantage of newly disclosed and even patched vulnerabilities has become common among cybercriminals, which makes it one of the primary attack vectors for everyday-threats, like crypto-mining, phishing, and ransomware. As suspected, a recently-disclosed critical vulnerability in the widely...