CVE-2024-5084-Red-Team

🚀 HashForm Exploit – ラボデモ このリポジトリには、WordPressプラグイン「Hash Form」で見つかった脆弱性 CVE-2024-5084 の概念実証エクスプロイトが含まれています。 学習、ラボテスト、およびセキュリティ研究のみを目的としています。 📌 脆弱性について CVE ID: CVE-2024-5084 問題: 認証なしのファイルアップロード → リモートコード実行 プラグイン: Hash Form – ドラッグ＆ドロップフォームビルダー ≤ 1.1.0 影響: 攻撃者が悪意のあるファイルをアップロードし、システムコマンドを実行できる...

CVE-2023-31702

CVE-2023-31702 — eScan प्रबंधन कंसोल SQL इंजेक्शन प्रमाणित अवलोकन CVE-2023-31702 माइक्रोवर्ल्ड टेक्नोलॉजीज eScan प्रबंधन कंसोल संस्करण 14.0.1400.2281 में पाया गया एक प्रमाणित SQL इंजेक्शन भेद्यता है। यह भेद्यता GetUserCurrentPwd एंडपॉइंट में मौजूद है, जहां UsrId पैरामीटर को बिना उचित स्वच्छता या...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit, um einen neuen Admin-Benutzer zu erstellen Kompromittiertes Audit-Log: Als Referenz diente: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html und https://github.com/Chocapikk/CVE-2023-225...

CVE-2020-27955

Reproduktion der Schwachstelle CVE-2020-27955 1. Auf dem Windows-Rechner die verwundbare Version von Git-LFS herunterladen. Download-Link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2. Auf dem Windows-Rechner installieren und die folgenden Informationen zur Hosts-Datei...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

vsftpd-234-vuln-report

💥 Relatório de Exploração de Backdoor vsftpd 2.3.4 Exploração de uma vulnerabilidade conhecida em vsftpd 2.3.4 usando Metasploit. 📌 Detalhes do Alvo IP do Alvo: 192.168.150.133 Serviço: FTP Versão Vulnerável: vsftpd 2.3.4 Módulo de Exploração: exploit/unix/ftp/vsftpd234backdoor Payload: Shell de...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Exploit Beschreibung vsftpd, was für Very Secure FTP Daemon steht, ist ein FTP-Server für Unix-ähnliche Systeme, einschließlich Linux. Er ist unter der GNU General Public License lizenziert. Er unterstützt IPv6 und SSL. Im Juli 2011 wurde entdeckt, dass die von der...

CVE-2011-2523

CVE-2011-2523 - Exploit vsftpd 2.3.4 Descrizione Very Secure FTP Daemon vsftpd è un server FTP per piattaforme Unix-like, inclusi i sistemi Linux. È distribuito sotto i termini della GNU General Public Licence. Supporta IPv6 e SSL. Nel luglio 2011 è stato rivelato che la versione 2.3.4 di vsftpd,...

Malicious code in pfp-block-independent-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2145fdce1d6879c4b5bd3682bf9b8e7c386f3f80f15721c26fe6bd2638564185 On require of the package, index.js loads bootstrap.js, which selects a platform-specific payload path, fetches bytes from one of four...

Shescape: Shell injection via unescaped parentheses on Windows with CMD

Impact This impacts users of Shescape on Windows that explicitly configure shell to CMD, or true with the default shell being CMD, using the escape and escapeAll APIs. An attacker may be able to achieve shell injection depending on the original command. javascript import as cp from...

FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows x64 Command Shell, Windows x64 IPv6 Bind TCP Stager with UUID Support

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Listen for an IPv6 connection with UUID Support Windows x64 Module Options This module requires Metasploit: https://metasploit.com/download Current source:...

FTP Fetch, Windows Command Shell, Bind TCP Stager (No NX or Win7)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection No NX Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Windows x86 Bind Named Pipe Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a pipe connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

FTP Fetch, Windows Command Shell, Hidden Bind Ipknock TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get yo...

FTP Fetch, Windows Command Shell, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection Windows x86 Module Options...

FTP Fetch, Windows Command Shell, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection with UUID Support Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

FTP Fetch, Windows Command Shell, Reverse TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Reverse TCP Inline

Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a command shell Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows x64 Command Shell, Bind TCP Stager with UUID Support (Windows x64)

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Listen for a connection with UUID Support Windows x64 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...