Vulnerability-Assessment-and-OSINT-CVE-2012-1823

脆弱性評価とOSINT: CVE-2012-1823 私のリポジトリは、ターゲットネットワークのスキャン中に検出された特定のセキュリティ脆弱性に関する、特定、分析、およびオープンソースインテリジェンス（OSINT）の収集プロセスを文書化しています。 プロセスの概要 この評価で実行されたワークフローは、主に4つのフェーズに分けられます。 1. 偵察と脆弱性検出 使用ツール : Nmap 実行内容 : 以下のコマンドを使用して高度なネットワークスキャンを実行しました: root@kitploit: nmap --script-help http-vuln-cve2012-1823 調査結果 ...

CVE-2012-1823

CVE-2012-1823 autoCheck...

CVE-2012-1823-Analyze

このリポジトリには README がありません。...

Vulnerable-Lab-Exploitation

취약한-실습실-침투 가상 보안 실습실 구축, 네트워크 정찰, CVE-2012-1823 취약점 공격을 시연하는 실습형 프로젝트입니다. 취약한 실습실 구축 및 PHP CGI 취약점 공격 CVE-2012-1823 🎯 프로젝트 개요 이 프로젝트는 격리된 가상 실습 환경을 구축하여 전범위 침투 테스트를 수행하는 방법을 보여줍니다. 오래된 Linux 서버를 대상으로 실제 공격을 시뮬레이션하며, 네트워크 탐색부터 시작하여 무단 원격 접근 권한 획득까지 수행했습니다. 🛠️ 사용 도구 및 기술 하이퍼바이저: VirtualBox 공격자 OS:...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI 引数インジェクション → RCE（Docker ラボ / CTF） ゼロから構築する 自己完結型 Docker ラボで、CVE-2024-4577 の背後にある 実際の 引数インジェクション → リモートコード実行プリミティブを実演します。 http://localhost:8080 経由で悪用し、シェルを取得して、コンテナ内からフラグを読み取ります。 これはシミュレーションではなく、本物の脆弱性です。 このコンテナは パッチ未適用の PHP 5.4.1 CGI バイナリをコンパイルし、実際の脆弱なホストと まったく同じ方法で Apache...

Open-Worldwide-Application-Security-Project-OWASP-

오픈 월드와이드 애플리케이션 보안 프로젝트OWASP OWASP ZAP을 사용한 DVWA의 자동 웹 취약점 평가를 통해 원격 코드 실행CVE-2012-1823과 같은 심각한 보안 결함을 식별하고 분석합니다...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 파일은 익스플로잇입니다 사용법 : python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py 파일은 사이트가 CVE-2012-1823 또는 CVE-2021-2291에 취약한지 확인합니다 사용법 : python3 CVE-2012-1823,CVE-2021-2291.py 명령어 whoami cd ls kali linux에서 테스트됨...

DVWA-ZAP-PENTEST

OWASP ZAP을 사용한 DVWA 취약점 평가 DVWADamn Vulnerable Web App에 대한 실습형 웹 애플리케이션 보안 평가로, OWASP ZAPZed Attack Proxy 2.17.0 을 사용하여 수행했습니다. 이 프로젝트는 전체 워크플로우를 문서화합니다: 정찰스파이더링, 자동 취약점 스캔, 그리고 발생한 경고 분석 — 원격 코드 실행CVE-2012-1823 발견을 포함합니다. ⚠️ 면책 조항: 이 평가는 교육 목적으로 의도적으로 취약하게 만들어진 애플리케이션인 DVWA를 대상으로 격리된 실습 환경에서...

PHP CGI v5.3.12/5.4.2 Remote Code Execution

sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string,...

Exploit for Command Injection in Php

Vulnerability Assessment and OSINT: CVE-2012-1823 My reposito...

Exploit for Command Injection in Php

CVE-2012-1823 - PHP CGI Argument Injection Remote Code Executi...

MiracleLinux 3 : php-5.1.6-34.0.1.AXS3 (AXSA:2012-548:04)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-548:04 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in...

Linux Distros Unpatched Vulnerability : CVE-2012-1823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php- cgi, does not properly handle query strings that lack a...

curl: Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities

Vulnerability description not provided...

PHP-CGI OS Command Injection Vulnerability

PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823...

Exploit for OS Command Injection in Php

CVE-2024-4577 This is a PoC for PHP CVE-2024-4577. Introdu...

PHP 8.1.x < 8.1.29 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.29, 8.2.x prior to 8.2.20, or 8.3.x prior to 8.3.8. It is, therefore, affected by multiple vulnerabilities: - An argument Injection in PHP-CGI with a bypass of CVE-2012-1823...

Slackware: Security Advisory (SSA:2024-158-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php81/php81-8.1.29-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Bypass of CVE-2012-1823, Argument Injection in PHP-CGI...

Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-158-01)

The version of php81 installed on the remote host is prior to 8.1.29 / 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-158-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...