46 matches found
Toolshell_CVE-2025-53770
ToolShell → CVE‑2025‑53770 漏洞利用 PoC 该软件包允许： 1. 上传 webshell 到 SharePoint 2. 提取 ValidationKey 3. 生成签名的 ViewState 4. 通过反向/绑定 shell 实现 RCE 🔧 设置 root@kitploit: git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 运行 上传 webshell 从 SharePoint 页面中，您可以访问页面源代码。只需转到“查看源代码”选项卡，如果存在，您将获得以下内容，可以复制...
suricata-rule-CVE-2025-53770
suricata-rule-CVE-2025-53770 CVE-2025-53770 탐지 규칙 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...
CVE-2025-53770-scanner
CVE-2025-53770 Script de Python para comprobar la vulnerabilidad CVE-2025-53770...
CVE-2025-53770_Raw-HTTP-Request-Generator
此存储库没有 README。...
CVE-2025-53770-Scanner
CVE-2025-53770 SharePoint 漏洞扫描器 100% 借助社交媒体上流传的各种 payload 和不同攻击手法拼凑而成，因此不附带任何保修等。该扫描器旨在识别存在漏洞的实例，并配有包含已知在野利用方式的配置，主要设计用于防御目的，帮助识别易受攻击的实例并及时修补。 该扫描器通过以下方式对 SharePoint 部署执行自动化检查： 向 SharePoint ToolPane 端点发送带有利用 payload 的精心构造的 POST 请求 检测机器密钥提取尝试和成功利用行为 识别二次 payload 部署（spinstall0.aspx）...
CVE-2025-53770
Microsoft SharePoint CVE-2025-53770 POC 免责声明：此代码/负载仅用于教育目的 。作者不支持或纵容任何未经授权或恶意使用此代码的行为。仅可在您拥有或已获得明确测试许可的环境中使用。滥用可能违反法律并导致严重处罚。...
CVE-2025-53770
Questo repository non contiene un README...
CVE-2025-53770
CVE-2025-53770...
SharePoint-CVE-2025-53770-POC
OurSharePoint - CVE-2025-53770 PoC Questo è un semplice strumento C che costruisce un payload .NET DataSet compresso con GZip e codificato in Base64, utilizzando un payload interno codificato con LosFormatter. È progettato per aiutare a riprodurre la catena RCE di deserializzazione di SharePoint...
ToolShellFinder
🛠️ ToolShellFinder: Rilevamento di CVE-2025-53770 & CVE-2025-53771 Uno script PowerShell 7+ ad alte prestazioni per scansionare i log IIS e rilevare segni di sfruttamento legati a ToolShell , che mira specificamente alle vulnerabilità zero-day CVE-2025-53770 e CVE-2025-53771 in Microsoft...
CVE-2025-53770-Vulnerable-Scanner
Pre-Exploit-Schwachstellenprüfung für CVE-2025-53770 mit Burp Suite Proxy Dieses Skript überprüft eine Liste von SharePoint-Hosts auf Schwachstellen gemäß CVE-2025-53770 unter Verwendung eines benutzerdefinierten Payloads und leitet alle Anfragen über den Proxy von Burp Suite zur Abhörung und...
it-sec-toolshell
ToolShell — Presentazione Zero-Day di SharePoint Un deck di slide Marp su CVE-2025-53770, con ogni slide mantenuta nel proprio file sotto slides/. Compilazione root@kitploit: ./build.sh assembla le slide in presentation.md ./build.sh html + renderizza presentation.html ./build.sh pdf + renderizza...
CVE-2025-53770
Progetto di Rilevamento CVE-2025-53770 Un kit di strumenti completo per il rilevamento di vulnerabilità progettato per identificare sistemi vulnerabili a CVE-2025-53770 CWE-502: Deserializzazione di Dati Non Affidabili. 🔍 Panoramica Questo progetto fornisce script di rilevamento pronti per l’uso...
ZeroPoint
ZeroPoint.ps1 ⚠ Ein defensives PowerShell-Dienstprogramm zur Erkennung und Eindämmung der Ausnutzung der CVE-2025-53770 Zero-Day-Sicherheitslücke in Microsoft SharePoint Server. 🔍 Was es tut Dieses PowerShell-Skript wurde entwickelt, um: Erkennen von Kompromittierungsindikatoren, wie z. B...
CVE-2025-53770-Scanner
🛡️ Scanner de Vulnerabilidade CVE-2025-53770 no SharePoint Uma ferramenta baseada em Python para detectar instâncias vulneráveis do Microsoft SharePoint afetadas por CVE-2025-53770 , uma vulnerabilidade de desserialização insegura acionada através do endpoint ToolPane.aspx. O scanner envia um...
Exploit for Deserialization of Untrusted Data in Microsoft
LetsDefend-...
📄 Microsoft SharePoint Server 2019 16.0.10383.20020 Remote Code Execution
Microsoft SharePoint Server 2019 version 16.0.10383.20020 proof of concept that demonstrates unauthenticated remote code execution by exploiting unsafe deserialization in SharePoint's ToolPane.aspx via the Scorecard:ExcelDataSet control. Exploit Title: Microsoft SharePoint Server 2019 – Remote Co...
Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution RCE Google Dork: intitle:"Microsoft SharePoint" inurl:"/layouts/15/ToolPane.aspx" Date: 2025-08-07 Exploit Author: Agampreet Singh RedRoot Tool Maker – https://github.com/Agampreet-Singh/RedRoot Vendor Homepage:...