CVE-2020-11981-PoC

Example Build demo stand root@kitploit: docker-compose up -d VM docker-container: 172.18.0.2 Command PoC root@kitploit: docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt INFO Vulnerabili...

fetch-broker-conf

Fetch Broker Configuration Fetch Broker Configuration will try to download the RocketMQ broker configuration in order to hunt for indicators of compromise in the rocketmqHome variable. The variable is used by various attackers to execute code via CVE-2023-33246. For additional details, see the...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance, versione C++ simile a TeamViewer https://dydtjr1128.github.io/RemoteAssistance-Cpp/ Ha anche realizzato una versione Java Swing = Collegamento Questa versione è implementata solo fino al mirroring locale, che non ha ancora utilizzato la rete. Da fare - x...

CVE-2019-5513-scanner

Scanner de Vulnerabilidades VMware Horizon /broker/xml Um scanner multi-thread de alto desempenho para detectar vulnerabilidades de divulgação de informações não autenticadas no endpoint /broker/xml do VMware Horizon Connection Server. 📋 Visão Geral O VMware Horizon Connection Server expõe um...

apache__activemq_CVE-2019-0222_5-15-8

Benvenuto in Apache ActiveMQ Apache ActiveMQ è un Message Broker ad alte prestazioni con licenza Apache 2.0 e un'implementazione di JMS 1.1. Per Iniziare Per aiutarti a iniziare, prova i seguenti link: Per Iniziare http://activemq.apache.org/version-5-getting-started.html Compilazione...

apache__activemq_CVE-2014-3576_5-10-1

Benvenuti in Apache ActiveMQ Apache ActiveMQ è un Message Broker ad alte prestazioni, con licenza Apache 2.0, e un'implementazione di JMS 1.1. Per Iniziare Per aiutarvi a iniziare, provate i seguenti link: Per Iniziare http://activemq.apache.org/version-5-getting-started.html Costruzione...

LazyMesh

LazyMesh Sistema di routing mesh che supporta l'uso di un proxy OpenDHT come backend, in modo che i nodi possano comunicare direttamente via internet. Molto presto pre-alpha, proof of concept, potrebbe non funzionare effettivamente, ecc. È pensato sia per casi d'uso hobbistici/HAM, sia per il più...

azbelt

azbelt Standalone-DLL- und Sliver-Erweiterung zum Aufzählen von Azure-bezogenen Anmeldeinformationen, hauptsächlich auf AAD-beigetretenen Rechnern Module aadjoin - Ermittelt Informationen über den AAD-Status des Rechners über NetGetAadJoinInformation credman - Ruft Anmeldeinformationen aus dem...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246RocketMQRCEEXP CVE-2023-33246 Exploit de Execução Remota de Código do RocketMQ Visão Geral As versões do RocketMQ 5.1.0 e anteriores são vulneráveis a Injeção Arbitrária de Código. O componente Broker do RocketMQ é exposto na extranet e não possui verificação de permissão. Um atacan...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire-Labor Während meiner Schicht als Tier-2-Analyst im Security Operations Center SOC erhielt ich eine Eskalation von einem Tier-1-Analysten bezüglich eines öffentlich zugänglichen Servers, der dabei beobachtet wurde, wie er mit mehreren verdächtigen...

vallumd

vallumd Dieses Programm ermöglicht es Ihnen, IP-Blacklists zu zentralisieren und zu verteilen. Wenn Sie einen Server im Internet betreiben, sind Sie sehr wahrscheinlich schon auf einen oder mehrere Brute-Force-Angriffe gestoßen. Kein Problem, installieren Sie einfach fail2ban. Erledigt. Aber wenn...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 远程代码执行 CVE-2023-33246 - Apache RocketMQ 配置远程代码执行漏洞 概述 RocketMQ 是一个分布式消息流平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。RocketMQ 的 Broker 组件暴露在外部网络，且缺乏权限验证。攻击者可以利用此漏洞，通过更新配置功能以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样效果。 检测 RocketMQ 版本以识别漏洞 root@kitploit: usage: check.p...

CVE-2023-33246-Copy

1. Riferimenti e studio CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Configurazione dell'ambiente locale 2.1 Scaricare le immagini root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Avviare broker, namesrv, console Avviare namesrv...

DEBIAN-CVE-2026-79921

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

Broker_ApacheMQ

BrokerApacheMQ CVE-2023-46604 - Vulnerabilità di ApacheMQ versione 5.15.5 Macchina: Broker...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

EUVD-2026-66754

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...