CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 漏洞利用 描述 vsftpd，全称为 Very Secure FTP Daemon，是一个用于类Unix系统（包括Linux）的FTP服务器。它根据GNU通用公共许可证授权。它支持IPv6和SSL。 2011年7月，人们发现从主站下载的vsftpd 2.3.4版本已被入侵。用户登录被入侵的vsftpd-2.3.4服务器时，可以输入 : 笑脸作为用户名，从而在端口 6200 上获得命令shell。这并不是vsftpd本身存在安全漏洞的问题，而是有人上传了一个包含后门的不同版本的vsftpd。此后，该站点已迁移到Google App...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 漏洞利用 描述 Very Secure FTP Daemon vsftpd 是一个适用于类 Unix 平台（包括 Linux）的 FTP 服务器。它遵循 GNU 通用公共许可证条款发布，支持 IPv6 和 SSL。 2011 年 7 月，有消息称可从主站下载的 vsftpd 2.3.4 版本已被攻陷。用户登录受篡改的 vsftpd-2.3.4 服务器，如果在用户名处输入 : 笑脸符号，即可在 6200 端口获取一个命令 Shell。这并非 vsftpd 本身的安全漏洞，而是有人上传了一个带有后门的独立篡改版本。该主站此后已迁移至...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Demo de Laboratorio Este repositorio contiene un exploit de prueba de concepto para CVE-2024-5084, una vulnerabilidad encontrada en el plugin Hash Form de WordPress. Está destinado únicamente para aprendizaje, pruebas en laboratorio e investigación de seguridad. 📌 Acerca de l...

CVE-2020-27955

Reproducción de la vulnerabilidad CVE-2020-27955 1、En la máquina Windows, descargue la versión vulnerable de Git-LFS Dirección de descarga: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2、Instale Git-LFS en la máquina Windows y agregue la siguiente información al archivo...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit para crear un nuevo usuario administrador Registro de auditoría comprometido: Como referencia, se proporciona: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html y...

CVE-2023-31702

CVE-2023-31702 — Inyección SQL en la Consola de Administración de eScan Autenticada Resumen CVE-2023-31702 es una vulnerabilidad de Inyección SQL autenticada descubierta en MicroWorld Technologies eScan Management Console versión 14.0.1400.2281. La vulnerabilidad existe en el endpoint...

vsftpd-234-vuln-report

💥 vsftpd 2.3.4 后门漏洞利用报告 使用 Metasploit 利用 vsftpd 2.3.4 中的已知漏洞进行攻击。 📌 目标详情 目标 IP： 192.168.150.133 服务： FTP 受影响版本： vsftpd 2.3.4 漏洞利用模块： exploit/unix/ftp/vsftpd234backdoor 载荷： 命令 Shell（TCP） 🔍 漏洞概述 vsftpd 2.3.4 包含一个恶意后门，当收到以 : 结尾的特制用户名时，会在 6200 端口打开一个命令 Shell。 CVE：CVE-2011-2523 🚀 漏洞利用步骤 root@kitploit:...

Malicious code in pfp-block-independent-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2145fdce1d6879c4b5bd3682bf9b8e7c386f3f80f15721c26fe6bd2638564185 On require of the package, index.js loads bootstrap.js, which selects a platform-specific payload path, fetches bytes from one of four...

Shescape: Shell injection via unescaped parentheses on Windows with CMD

Impact This impacts users of Shescape on Windows that explicitly configure shell to CMD, or true with the default shell being CMD, using the escape and escapeAll APIs. An attacker may be able to achieve shell injection depending on the original command. javascript import as cp from...

FTP Fetch, Windows x64 Command Shell, Windows x64 IPv6 Bind TCP Stager with UUID Support

Fetch and execute an x64 payload from an FTP server. Spawn a piped command shell Windows x64 staged. Listen for an IPv6 connection with UUID Support Windows x64 Module Options This module requires Metasploit: https://metasploit.com/download Current source:...

FTP Fetch, Windows Command Shell, Bind TCP Stager (No NX or Win7)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection No NX Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Bind TCP Stager (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection Windows x86 Module Options...

FTP Fetch, Windows Command Shell, Windows x86 Bind Named Pipe Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a pipe connection Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

FTP Fetch, Windows Command Shell, Hidden Bind Ipknock TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get yo...

FTP Fetch, Windows Command Shell, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection with UUID Support Windows x86 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...

FTP Fetch, Windows Command Shell, Reverse TCP Stager

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows Command Shell, Reverse TCP Inline

Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a command shell Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Windows shellcode stage, Hidden Bind TCP Stager

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options This module requires Metasploit: https://metasploit.com/download Current source:...