46 matches found
CVE-2021-3130
CVE-2021-3129 ¡Otro exploit más para CVE-2021-3129! Diseñado para ofrecer más funciones y fiabilidad. Basado en https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DESCARGO DE RESPONSABILIDAD: Este script está hecho para auditar la seguridad de los sistemas. Utilice est...
laravel-CVE-2021-3129-EXP
laravel-CVE-2021-3129-EXP CVE-2021-3129 getshell con un clic Uso python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Después de tener éxito, usa 哥斯拉 para conectarte...
laravel-exploits
laravel-exploits Exploit para CVE-2021-3129 Detalles: https://www.ambionics.io/blog/laravel-debug-rce Uso root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar...
CVE-2021-3129
CVE-2021-3129 Instrucciones de uso: Nota: Se requiere un entorno PHP local. root@kitploit: python3 CVE-2021-3129.py -u http://127.0.0.1:80 （solo detectar POC） python3 CVE-2021-3129.py -u http://127.0.0.1:80 -c whoami （ejecución de comandos, por defecto recorrerá todas las cadenas de explotación）...
Laravel-debug-Checker
Laravel-debug-Checker CVE-2021-3129 Checker por ./MrMad Referencia : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 instalar módulo root@kitploit: python -m pip install -r requirements.txt instalación en linux root@kitploit: git clone...
Laravel_CVE-2021-3129_EXP
LaravelCVE-2021-3129EXP Exploit de referencia: https://github.com/SNCKER/CVE-2021-3129 Requisitos de versión Laravel Iginition == 2.5.1 Probado con la versión local del EXP en Laravel 8.4.2 Notas importantes Se debe colocar este EXP en el directorio de phpgcc, de lo contrario no se podrá invocar...
CVE-2021-3129
This repository does not have a README...
CVE-2021-3129-exp
Vulnerabilidad RCE en modo Debug de Laravel CVE-2021-3129 poc / exp CVE-2021-3129 exp / poc Nota ⚠️: Debido a que la explotación y detección de esta vulnerabilidad envían múltiples solicitudes, el proceso puede ser lento. uso: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -...
Mass-CVE-2021-3129-Scanner
Escáner masivo para CVE-2021-3129 Laravel Debug RCE Uso root@kitploit: $ bash massCVE-2021-3129scan.sh list.txt...
CVE-2021-3129-piperpwn
Questo repository non contiene un README...
laravel-CVE-2021-3129-EXP
laravel-CVE-2021-3129-EXP CVE-2021-3129 un clic per ottenere una shell Utilizzo python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Una volta riuscito, utilizza il collegamento di Godzilla per connetterti...
CVE-2021-3129-Lab
CVE-2021-3129: Laravel Debug-Modus RCE Lab Ein praktisches Hands-on-Lab zur Ausnutzung von CVE-2021-3129 – einer kritischen Laravel-Schwachstelle, die nicht authentifiziertes Dateilesen und potenzielle RCE ermöglicht. Schnellstart root@kitploit: Clone git clone...
CVE-2021-3129
इस रिपॉजिटरी में README नहीं है।...
Laravel-8.4.2-rce-CVE-2021-3129
Laravel-8.4.2-rce-CVE-2021-3129 root@kitploit: exploit.py tested use python3,and only working with phpggc . first docker-compose up port on 8888 at 127.0.0.1 generate key first...
Laravel-CVE-2021-3129
Laravel-CVE-2021-3129 CVE-2021-3129 Descrizione Integra https://github.com/zhzyker/CVE-2021-3129 e https://github.com/SNCKER/CVE-2021-3129, questo progetto offre i seguenti vantaggi: Mantiene la funzionalità dei comandi personalizzati Aggiunge la funzione di uscita automatica dopo lo sfruttamento...
Exploit for CVE-2021-3129
No d...
Exploit for CVE-2021-3129
laravel-rce Laravel 8.4.2 RCE...
CVE-2021-3129
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2...
MTN Group: Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/
The Laravel framework contained a vulnerability known as CVE-2021-3129, which allowed remote code execution due to unsafe usage of PHP in the Ignition debug module. This vulnerability was relatively easy to exploit and did not require user authentication, resulting in a high CVSS score of 9.8. Th...