httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

CVE-2021-21300

CVE-2021-21300: Arbitrary Code Execution via Malicious Git Hooks 📌 Summary CVE-2021-21300 is a critical vulnerability in Git versions 2.14.2 to 2.30.1 that allows attackers to execute arbitrary code on victim machines by exploiting symbolic links and case-insensitive file systems. 🧠 Problem...

hook

amalmurali47/hook This repository is part of the PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. This repository contains the malicious hook used in the exploit. Overview For detailed instructions and an explanation of how the exploit works,...

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

git_rce

Remote Code Execution Attack via git clone CVE-2024-32002 Contributors 이정우@Roronoawjd Background This vulnerability is a Remote Code Execution RCE vulnerability that occurs when cloning a git repository containing submodules on case-insensitive file systems such as Windows and macOS. RCE is a...

CVE-2024-32002

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 git clone 작업 중 RCE를 허용하는 Git의 취약점인 CVE-2024-32002를 악용하기 위한 PoC를 포함합니다. 공격자는 특정 방식으로 서브모듈을 포함한 저장소를 조작하여 대소문자를 구분하지 않는 파일 시스템에서 심볼릭 링크 처리를 악용하고, .git/ 디렉토리에 파일을 작성하여 악성 훅을 실행할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 게시물 이 익스플로잇이 어떻게...

git_rce

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 git clone 작업 중 RCE를 허용하는 Git의 취약점인 CVE-2024-32002를 악용하는 PoC를 포함합니다. 공격자는 특정 방식으로 서브모듈이 포함된 저장소를 제작하여 대소문자를 구분하지 않는 파일시스템에서 심볼릭 링크 처리를 악용하고, .git/ 디렉터리에 파일을 작성하여 악성 훅의 실행을 유도할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 게시글 이 익스플로잇이 어떻게...

UBUNTU-CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside...

DEBIAN-CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

EUVD-2026-75089

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876

This CUPS vulnerability (a follow-up to CVE-2026-27447 ) involves two case-insensitive comparisons on request-derived usernames in scheduler side paths outside the main authorization path—specifically in printer ACL validation and private-attribute filtering . The mismatched case handling could a...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations. Mitigation Fixed on upstream master branch...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...