Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. root@kitploit: git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell root@kitploit: http://confluence.local/plugins/servlet/testbin/cmServlet Godzil...

NSE--CVE-2023-22515

NSE script for checking the presence of CVE-2023-22515...

confluence-cve-2023-22515

confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2023-22515

CVE-2023-22515 Confluence Data Center & Server Exploit de vulnerabilidad de escalada de privilegios Uso root@kitploit: python3 CVE-2023-22515.py url username password Descargo de responsabilidad Esta herramienta de detección está destinada únicamente para uso de pruebas de seguridad por parte de...

CVE-2023-22518

CVE-2023-22518 Verificador de las vulnerabilidades críticas CVE-2023-22518 y CVE-2023-22515 en Confluence. Descripción Este script está diseñado para verificar y explotar vulnerabilidades en instancias de Atlassian Confluence. Comprueba la vulnerabilidad CVE-2023-22518 y explota la vulnerabilidad...

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an...

CVE-2023-22515

...

CVE-2023-22515

Script di exploit per CVE-2023-22515 Versioni interessate root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Sfruttamento della vulnerabilità root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL...

cve-2023-22515

इस रिपॉजिटरी में README नहीं है।...

cve-2023-22515-exp

cve-2023-22515-exp Script di exploit in Python per cve-2023-22515 Parametri: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specifica l'URL -U USERNAME, --username USERNAME Specifica il nome utente -PW PASSWORD, --password PASSWORD Specifica la password -E EMAIL,...

cve-2023-22515-lab

cve-2023-22515-lab Laboratorio di sicurezza pratico che dimostra CVE-2023-22515 — Bypass dell'autenticazione di Atlassian Confluence utilizzando un ambiente vulnerabile simulato...

CVE-2023-22515_RCE

Un metodo rce dopo aver ottenuto i permessi di amministrazione di Confluence Passaggi manuali per Getshell Puoi caricare un plugin personalizzato nel pannello di amministrazione per ottenere rce. Accedi a plugins/servlet/com.jsos.shell/ShellServlet...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un semplice script bash per l'exploit di CVE-2023-22515. Informazioni Le istanze Confluence Data Center e Server presentano una vulnerabilità di controllo degli accessi non corretto CVE-2023-22515, che consente agli attaccanti di creare account amministratore Confluence non...

Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Atlassian Confluence Data Center And Server Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Atlassian Confluence Data Center and Server - Authentication Bypass Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

Exploit CVE-2023-22515 A simple basch script exploit for CV...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-Scan About This is simple scanner for CVE-...

Atlassian Confluence Broken Access Control Vulnerability (CVE-2023-22515)

Atlassian issued an Advisory on October 4, 2023, for CVE-2023-22515, a critical severity vulnerability affecting Confluence Server and Data Center. According to the advisory, the vulnerability was initially published as a Privilege Escalation vulnerability but was later updated to a Broken Access...