procrustes

Procrustes Um script bash que automatiza a exfiltração de dados via DNS quando temos uma execução de comando cega em um servidor onde todas as conexões de saída, exceto DNS, são bloqueadas. O script atualmente suporta sh, bash e powershell e é compatível com execução de comando do tipo exec por...

CVE-2024-29824

CVE-2024-29824: Vulnerabilidade de Injeção SQL e Execução Remota de Código no Ivanti EPM Exploit de prova de conceito para executar comandos às cegas em appliances Ivanti EPM vulneráveis. Blog Post Análise aprofundada e indicadores de comprometimento aqui:...

cve-2021-26084-confluence

Dies ist ein schneller und schmutziger poc, der für eine bestimmte Confluence-Instanz optimiert wurde, da keiner der vorhandenen handelsüblichen pocs funktioniert hat. Offensichtlich basiert es fast vollständig auf der Arbeit von https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md un...

Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance

CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...

Zivif Camera 2.3.4.2103 iptest.cgi Blind Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zivif Camera iptest.cgi Blind Remote Command Execution', 'Description' = %q This module exploits a remote command execution vulnerability in Zivi...

gitWeb 1.5.2 - Remote Command Execution

No description provided by source. Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.5.2 Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code: The cgi script doesn't show the command output blind command...

gitWeb v1.5.2 Remote Command Execution

No description provided by source. Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.5.2 Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code: The cgi script doesn't show the command output blind command...