laravel-exploits

laravel-exploits 针对 CVE-2021-3129 的漏洞利用 详情：https://www.ambionics.io/blog/laravel-debug-rce 用法 root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2021-3129

Este repositorio nao tem um README...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 un clic per ottenere una shell Utilizzo python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Dopo il successo, connettersi utilizzando Godzilla...

Laravel-8.4.2-rce-CVE-2021-3129

Laravel-8.4.2-rce-CVE-2021-3129 root@kitploit: exploit.py tested use python3,and only working with phpggc . first docker-compose up port on 8888 at 127.0.0.1 generate key first...

Mass-CVE-2021-3129-Scanner

ماسح جماعي لـ CVE-2021-3129 Laravel Debug RCE الاستخدام root@kitploit: $ bash massCVE-2021-3129scan.sh list.txt...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 Ein-Klick-getshell Verwendung python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 Nach erfolgreicher Ausführung einfach mit Godzilla verbinden...

CVE-2021-3129-piperpwn

Questo repository non contiene un README...

CVE-2021-3129

CVE-2021-3129 Anleitung: Hinweis: Es wird eine PHP-Umgebung benötigt. root@kitploit: python3 CVE-2021-3129.py -u http://127.0.0.1:80 nur POC-Prüfung python3 CVE-2021-3129.py -u http://127.0.0.1:80 -c whoami Befehlsausführung, standardmäßig werden alle Exploit-Chains durchlaufen python3...

Laravel-CVE-2021-3129

Laravel-CVE-2021-3129 CVE-2021-3129 Descrição Integra https://github.com/zhzyker/CVE-2021-3129 e https://github.com/SNCKER/CVE-2021-3129; este projeto possui as seguintes vantagens: Mantém o recurso de comandos personalizados Adiciona o recurso de saída automática após exploração bem-sucedida,...

Laravel-debug-Checker

Laravel-debug-Checker CVE-2021-3129 Checker di ./MrMad Riferimento : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 installa il modulo root@kitploit: python -m pip install -r requirements.txt installazione su linux root@kitploit: git clone...

Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP exp di riferimento: https://github.com/SNCKER/CVE-2021-3129 Requisiti di versione Laravel Iginition == 2.5.1 Versione locale dell'EXP: Laravel 8.4.2 Avvertenze È necessario posizionare l'exp nella directory phpgcc, altrimenti non sarà possibile richiamare phpgcc Esempio...

CVE-2021-3130

CVE-2021-3129 L'ennesimo exploit per CVE-2021-3129! Realizzato per offrire più funzionalità e affidabilità. Basato su https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: Questo script è stato creato per auditare la sicurezza dei sistemi. Utilizzalo solo sui...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug-Modus RCE Lab Ein praktisches Hands-on-Lab zur Ausnutzung von CVE-2021-3129 – einer kritischen Laravel-Schwachstelle, die nicht authentifiziertes Dateilesen und potenzielle RCE ermöglicht. Schnellstart root@kitploit: Clone git clone...

CVE-2021-3129-exp

Laravel Debug mode RCE CVE-2021-3129 poc / exp CVE-2021-3129 exp / poc Attenzione ⚠️: poiché lo sfruttamento e il rilevamento di questa vulnerabilità inviano più richieste, il processo potrebbe essere lento. usage: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -u url --exp...

Exploit for CVE-2021-3129

No d...

Exploit for CVE-2021-3129

laravel-rce Laravel 8.4.2 RCE...

CVE-2021-3129

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of filegetcontents and fileputcontents. This is exploitable on sites using debug mode with Laravel before 8.4.2...

MTN Group: Information disclosure due to debug mode enabled at Laravel instance https://mpos.mtn.co.sz/

The Laravel framework contained a vulnerability known as CVE-2021-3129, which allowed remote code execution due to unsafe usage of PHP in the Ignition debug module. This vulnerability was relatively easy to exploit and did not require user authentication, resulting in a high CVSS score of 9.8. Th...

Exploit for CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python e...

Facade Ignition < 1.16.14 / 2.x < 2.4.2 / 2.5.x < 2.5.2 RCE

The version of Facade Ignition installed of the remote host is prior to 1.16.14, or 2.x prior to 2.4.2, or 2.5.x prior to 2.5.2. It is, therefore, affected by a remote code execution vulnerability. Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attacke...