73 matches found
grafana-CVE-2021-43798
Grafana CVE Scan 21-43798 0.1 Scanner for Grafana Path Traversal Vulnerability found in CVE-2021-43798 Disclaimer: This is for Educational Purposes only! References for CVE: 1 - NIST CVE Details 2 - Grafana Notes Workarounds All installations between v8.0.0-beta1 and v8.3.0 should be upgraded as...
GrafXploit
Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...
CVE-2021-43798-Grafana
CVE-2021-43798 Grafana Arbitrary File Read 1. Installation pip3 install -r requirements.txt 2. Usage $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || | / / | | || | | | / / , | | | | / ||...
GrafanaDirectoryScanner
PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...
grafanaExp
grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. ā ./grafanaExp -h NAME: grafanaExp -...
exploit-grafana-CVE-2021-43798
CVE-2021-43798 ā Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...
CVE-2021-43798-Grafana-POC
CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...
CVE-2021-43798
This repository does not have a README...
grafana-unauth-file-read
grafana-unauth-file-read : CVE-2021-43798 Unauthorized reading of files in Grafana 0day It looks like the new 0day LFI in Grafana exists thanks to the grafana-clock-panel plugin. It is enough to send a GET request of the form: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passw...
grafana-cve-2021-43798
grafana-cve-2021-43798 ę¤ä»åŗå å«ēØäŗå¤ē°čÆ„ę¼ę“ēę件ć ä½æēØ仄äøå½ä»¤å°å ¶éØē½²å°ęØēéē¾¤äøć kubectl apply -f grafana-vuln-app.yaml...
CVE-2021-43798-mass_scanner
Grafana CVE 2021-43798 Grafana ęŖęęä»»ęę件čÆ»åę¼ę“ CVE-2021-43798 ä¾čµ python3 -m pip install -r requirements.txt ę pipenv install -r requirements.txt Dorks Dorksļ¼Shodan | Googleļ¼ Google Dorks Shodan Dorks ä½æēØę¹ę³ ē®ę ę«å°¾äøåø¦ /ćäøäøåø¦ http:// ę https:// targets.txt ę件ē¤ŗä¾ target.com example.com foo.gov xpto.com.de usag...
CVE-2021-43798-poc
CVE-2021-43798-poc Grafana8.x ä»»ęę件čÆ»å python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...
-Grafana-LFI-CVE-2021-43798
š Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. āØ Features Python 3.10+ compatibili...
grafana-exploit-CVE-2021-43798
grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...
CVE-2021-43798
Subir o lab docker compose up -d Poc: python3 CVE-2021-43798.py IP PORT By: https://www.linkedin.com/in/steven-guimaraes-29aa79212/...
Grafana-LFI-exploit
Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script python3 grafana-exploit.py...
CVE-2021-43798-Exploit-for-Windows-and-Linux
CVE-2021-43798-Exploit-for-Windows-and-Linux Modified exploit for CVE-2021-43798. Original exploit code: https://www.exploit-db.com/exploits/50581 Changes: This modified version is compatible with both Windows and Linux underlying servers. When a user enters an absolute path Eg:...
Grafana-Password-Decryptor
Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: š AES-256 Base64 datasource table ā Decrypt directly with AESDecrypt.py šØ PBKDF2HMACSHA256 user...
LabAutomationCVE-2021-43798
LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...
Grafana-CVE-2021-43798
Grafana-CVE-2021-43798 Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secretkey found in the defaults.i...