164 matches found
CVE-2019-0604
一、k8gegeのcve-2019-0604-exp.pyを解説 k8gegeのスクリプト https://github.com/k8gege/CVE-2019-0604 正直言って、k8gegeのpyスクリプトは少し派手で、大量の16進数文字列があり、payload1,2,3に分かれています。悪質ですね。 pythonスクリプトがリモートPOSTするpayloadは、逆シリアル化後にXMLデータボディになります。 root@kitploit: cmd /c echo ^%@ Page Language="Jscript" %^^%var pwd="tom";var...
CVE-2022-45047
CVE-2022-45047 POC、EXP、私のためのchatGPT コード root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding":...
SSP-Assignment-3-RCEYouLater
CVE-2023-46604: Apache ActiveMQ RCE 概念実証 課題: SSP Assignment 3 チーム: RCE You Later メンバー: Banica Horia Alexandru, Comarlau Vlad-Constantin このリポジトリを使用してPoCを実行する様子のビデオリンク: https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 概要 このリポジトリには、CVE-2023-46604 に対する完全に機能する概念実証 PoC が含まれています。 この脆弱性により、攻撃者は脆弱なApache...
struts-s2-052-deserialization-rce-lab
Apache Struts S2-052 XMLデシリアライゼーションRCE このリポジトリは、悪意のあるXMLデシリアライゼーションを利用したApache Struts S2-052 CVE-2017-9805のエクスプロイトを示しています。 このエクスプロイトは、INE eWPTX Practice Range – Struts XML Deserialization RCEラボ を解く際に作成されました。 脆弱性の概要 Apache Struts RESTプラグインは、XStream を使用してXMLリクエストをデシリアライズします。 アプリケーションが以下のXMLを処理する場合：...
S2-052
CVE-2017-9805 （S2-052）リバースシェル Exploit 影響バージョン root@kitploit: Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 Poc root@kitploit: Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn...
CVE-2019-2725
CVE-2019-2725 WebLogic通用利用工具 - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 载荷构建器与利用 信息/帮助 root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | | CVE-2017-3506 / CVE-2017-10271 /...
CVE-2021-42237
CVE-2021-42237 これは、Assetnoteのレポートから取得したCVE-2021-42237のエクスプロイト/PoCです。 免責事項: 私はAssetnoteとは一切関係ありません。このコンテンツは教育目的のみで提供されています。 以下のPoCで、CMD-COMMAND-HEREとHostを必ず置き換えてください: root@kitploit: POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1 Host: sitecore.local Accept-Encoding: gzip, deflate...
CVE-2025-59287
CVE-2025-59287 WSUS CVE-2025-59287 – XML 反序列化 RCE（反向 Shell） 一个针对 WSUS CVE-2025-59287 的聚焦 PoC，通过 XML 反序列化实现 Windows 反向 Shell。此脚本仅支持反向 Shell 载荷（无 calc 回退）。 目标：安装了 WSUS 角色的 Windows Server 技术：SOAP + ObjectDataProvider 反序列化 结果：cmd.exe 启动 PowerShell 反向 Shell 连接到你的监听器 免责声明 仅限在实验室环境中进行授权测试。你有责任遵守所有适用法律。 ...
Oracle-WebLogic-CVE-2017-10271
Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 脆弱性の説明 初期には、ハッカーがWebLogic WLSコンポーネントの脆弱性を利用して企業サーバーに対して大規模なリモート攻撃を仕掛け、多くの企業のサーバーが侵害され、攻撃を受けた企業数は明らかな増加傾向を示しており、高度な警戒が必要です。その中で、CVE-2017-3506はOracle...
BIT-JENKINS-2026-84646
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
CVE-2026-84646
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
CVE-2026-84646
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
CVE-2026-84646
Jenkins (versions 2.579 and earlier, LTS 2.568.2 and earlier) is affected by a lack of type restriction in XML deserialization , allowing an attacker with Overall/Read permission to create user objects by submitting crafted XML. The root cause is that user objects can appear as nested field value...
EUVD-2026-70112
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
PT-2026-84769
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
RHCOS 4 : OpenShift Container Platform 4.6.17 (RHSA-2021:0423)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0423 advisory. - ant: insecure temporary file vulnerability CVE-2020-1945 - ant: insecure temporary file CVE-2020-11979 - jenkins: Arbitrary file...
RHCOS 4 : OpenShift Container Platform 4.5.33 (RHSA-2021:0429)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0429 advisory. - ant: insecure temporary file vulnerability CVE-2020-1945 - ant: insecure temporary file CVE-2020-11979 - jenkins: Arbitrary file...
Exploit for Deserialization of Untrusted Data in Apache Struts
Apache Struts S2-052 XML Deserialization RCE This repository...
Bosch Rexroth IndraWorks UA.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
Bosch Rexroth IndraWorks OPC.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...