Apisix_Crack

ApisixCrack Overview Apisix series vulnerability detection and exploitation tool, including unauthorized access vulnerability CVE-2021-45232 and default secret key vulnerability CVE-2020-13945, supports batch detection and exploitation. Usage Batch detection: Write URLs line by line in a file,...

CVE-2021-45232-RCE

Apache APISIX Dashboard RCE usage: -h -u URL -p PORT -c CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url e.g: http://127.0.0.1:9000 -p PORT, --port PORT apisix management port default: 9080 -c CMD, --cmd CMD command default: ifconfig reference...

cve-2021-45232-exp

apisixdashboardrce No seas malvado...

CVE-2021-45232-POC

CVE-2021-45232-POC url:https://carbon.now.sh/FcD8uSynpCwc7Dpk03Qb...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

Apache APISIX Dashboard < 2.10.1 Authentication Bypass

The version of Apache APISIX Dashboard installed on the remote host is prior to 2.10.1. It is, therefore, affected by an authentication bypass vulnerability. An unauthenticated, remote attacker could exploit this to bypass authentication. Note that Nessus has not tested for these issues but has...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

Apache APISIX Dashboard: Unauthorized access to the interface...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232-RCE CVE-2021-45232-RCE – Multi-threaded batch...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232 RCE POC Screenshots !P...

CVE-2021-45232

creationtimestamp| type| source ---|---|--- 2021-12-29 05:57:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1243 2021-12-29 07:24:12+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1573 2021-12-29 13:42:55+00:00| published-proof-of-concept|...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232-POC !https://github.com/bad...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232

In Apache APISIX Dashboard before version 2.10.1, the Manager API is implemented using two frameworks (gin and the droplet-based framework) with all APIs and authentication middleware built on droplet, while some APIs directly call gin interfaces, bypassing authentication. This leads to an authen...

CVE-2021-45232 security vulnerability on unauthorized access.

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...