-Grafana-LFI-CVE-2021-43798

🚀 Grafana LFI Exploit CVE-2021-43798 Script de automatización en Python 3 para explotar la vulnerabilidad de Local File Inclusion LFI en Grafana versiones de la 8.0.0 a la 8.3.0. Este exploit permite realizar un directory traversal para leer archivos sensibles del sistema operativo sin...

CVE-2021-43798-Grafana-POC

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...

CVE-2021-43798

CVE-2021-43798...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...

Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

GrafXploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

Grafana-8.3-Directory-Traversal

Script en Python para CVE-2021-43798 Descripción: Directory Traversal en Grafana 8.3.0 Prueba esto si EDB-ID 50581 no funciona! Artículo Original: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 Durante una máquina en OffSec Proving Ground...

CVE-2021-43798-Grafana

CVE-2021-43798 Grafana: Lectura arbitraria de archivos 1. Instalación root@kitploit: pip3 install -r requirements.txt 2. Uso root@kitploit: $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || |...

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

CVE-2021-43798

Este repositorio no tiene un README...

grafanaExp

grafanaExp Explota la vulnerabilidad de lectura arbitraria de archivos CVE-2021-43798 de Grafana, detecta automáticamente si hay vulnerabilidades, los plugins existentes, extrae claves, descifra el archivo db del servidor y genera información de datasourrce. Uso Proporciona funcionalidades de exp...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...

CVE-2021-43798

Subir o lab docker compose up -d Poc: python3 CVE-2021-43798.py IP PORT By: https://www.linkedin.com/in/steven-guimaraes-29aa79212/...

Grafana-LFI-exploit

Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script root@kitploit: python3...

grafana-CVE-2021-43798

Grafana CVE Scan 21-43798 0.1 Scanner for Grafana Path Traversal Vulnerability found in CVE-2021-43798 Disclaimer: This is for Educational Purposes only! References for CVE: 1 - NIST CVE Details 2 - Grafana Notes Workarounds All installations between v8.0.0-beta1 and v8.3.0 should be upgraded as...

CVE-2021-43798-Grafana-path-traversal-tester

Grafana Path Traversal Tester This script automates the testing of known Grafana plugin endpoints for potential path traversal vulnerabilities using curl. 🛠 Features Reads target paths from a file e.g. paths.txt Sends HTTP requests using --path-as-is to bypass normalization Captures HTTP status...

CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Exploit-for-Windows-and-Linux Modified exploit for CVE-2021-43798. Original exploit code: https://www.exploit-db.com/exploits/50581 Changes: This modified version is compatible with both Windows and Linux underlying servers. When a user enters an absolute path Eg:...

Grafana-Password-Decryptor

Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: 🔐 AES-256 Base64 datasource table → Decrypt directly with AESDecrypt.py 🔨 PBKDF2HMACSHA256 user...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...