CVE-2023-22515

...

CVE-2023-22518

CVE-2023-22518 Checker for CVE-2023-22518 and CVE-2023-22515 critical vulnerabilities in Confluence. Description This script is designed to check for and exploit vulnerabilities in Atlassian Confluence instances. It checks for the vulnerability CVE-2023-22518, and exploits the vulnerability...

cve-2023-22515-lab

cve-2023-22515-lab Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. root@kitploit: git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell root@kitploit: http://confluence.local/plugins/servlet/testbin/cmServlet Godzil...

NSE--CVE-2023-22515

NSE script for checking the presence of CVE-2023-22515...

confluence-cve-2023-22515

confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2023-22515

CVE-2023-22515 Confluence Data Center & Server privilege escalation vulnerability Exploit Usage root@kitploit: python3 CVE-2023-22515.py url username password Disclaimer This detection tool is only for security testing by security testers of major security companies. Do not perform intrusion...

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197

LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an...

cve-2023-22515

इस रिपॉजिटरी में README नहीं है।...

cve-2023-22515-exp

cve-2023-22515-exp Script di exploit in Python per cve-2023-22515 Parametri: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specifica l'URL -U USERNAME, --username USERNAME Specifica il nome utente -PW PASSWORD, --password PASSWORD Specifica la password -E EMAIL,...

CVE-2023-22515_RCE

Un metodo rce dopo aver ottenuto i permessi di amministrazione di Confluence Passaggi manuali per Getshell Puoi caricare un plugin personalizzato nel pannello di amministrazione per ottenere rce. Accedi a plugins/servlet/com.jsos.shell/ShellServlet...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un semplice script bash per l'exploit di CVE-2023-22515. Informazioni Le istanze Confluence Data Center e Server presentano una vulnerabilità di controllo degli accessi non corretto CVE-2023-22515, che consente agli attaccanti di creare account amministratore Confluence non...

Atlassian Confluence Data Center and Server - Authentication Bypass (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Atlassian Confluence Data Center And Server Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Atlassian Confluence Data Center and Server - Authentication Bypass Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

Exploit CVE-2023-22515 A simple basch script exploit for CV...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-Scan About This is simple scanner for CVE-...

Atlassian Confluence Broken Access Control Vulnerability (CVE-2023-22515)

Atlassian issued an Advisory on October 4, 2023, for CVE-2023-22515, a critical severity vulnerability affecting Confluence Server and Data Center. According to the advisory, the vulnerability was initially published as a Privilege Escalation vulnerability but was later updated to a Broken Access...