CVE-2024-4577-LetsDefend-walkthrough

Guía de Respuesta a Incidentes: Mitigación de un Ataque de Día Cero CVE-2024-4577 Informe de LetsDefend PHP-CGI CVE-2024–4577 Escenario: Nuestro sistema de detección de intrusiones IDS y sistema de prevención de intrusiones IPS identificaron un posible ataque dirigido a un componente crítico del...

docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verificar ejecución con: docker ps 4. verificar ejecución del servidor web: http://localhost:8080 5. explotar vulnerabilidad : curl -H "user-agent: :; ; echo;...

php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 y CVE-2024-8926 Herramienta de Exploit Herramienta de pruebas automatizadas para la vulnerabilidad de inyección de parámetros PHP-CGI , compatible con CVE-2024-4577 y CVE-2024-8926 , que permite realizar ejecución de comandos, subida y descarga de archivos , entre...

cve-2024-4577

Script de prueba para CVE-2024-4577 Este script de Python es una herramienta simple PoC Prueba de Concepto para diagnosticar la vulnerabilidad más reciente de PHP CVE-2024-4577. ⚠️ Esta herramienta se proporciona con fines de diagnóstico de seguridad y debe usarse solo en sistemas propios o en...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Algunas imágenes de Docker para jugar con CVE-2021-41773 y CVE-2021-42013 Ejecuta docker compose up -d para levantar todos los contenedores. Los servidores se ejecutarán en los puertos 8080, 8081, 8082 y 8083. 8080 contiene un Apache 2.4.49 con CGI deshabilitado. 8081...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

ShockZaum-CVE-2014-6271

CVE-2014-6271 Script to attack shellshock vulnerability ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

cve-2021-41773-docker-lab

Lab CVE-2021-41773 Container lab to play/learn with CVE-2021-41773 File disclosure: $ docker build -t apache-default defaultconf $ docker run -dit --name apache-app -p 81:80 apache-default PoC curl -s --path-as-is "http://iptarget:80/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" output note: The...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner shodan...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...

CVE-2024-4577_PowerShell

CVE-2024-4577PowerShell Please note: Ensure that you are authorized to conduct such penetration testing in the target environment; unauthorized use of attack techniques may violate relevant laws. The code is for educational and research purposes only, and should be used within legal and ethical...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation Un proyecto práctico que demuestra la configuración de un laboratorio de seguridad virtual, reconocimiento de red y explotación de CVE-2012-1823. Configuración del laboratorio vulnerable y explotación de PHP CGI CVE-2012-1823 🎯 Resumen del proyecto Este proyecto...

CVE-2024-12828-PoC

CVE-2024-12828-PoC Webmin CGI Command Injection Remote Code Execution Vulnerability...

CVE-2024-4577

CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments: -h, --help show...

CVE-2021-41773

CVE-2021-41773 Usage docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server 2.4.49. Occurs when Require all...

CVE-2021-41773

CVE-2021-41773 exploit PoC with Docker setup. CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-41773:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-41773:1.0 Note: You can also use Image ID...