go-exploit

go-exploit: Go Exploit Framework go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits. The framework was developed to simplify large scale scanning, exploitation, and integration with other...

CVE-2023-33246

В этом репозитории нет README...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Удалённое выполнение кода в Apache RocketMQ ОБЗОР Apache RocketMQ — одна из самых популярных и широко используемых распределённых платформ обмена сообщениями и потоковой передачи данных. Недавно была опубликована информация об уязвимости выполнения команд в Apache RocketMQ,...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation Этот проект представляет собой демонстрацию на базе Maven по устранению уязвимости CVE-2023-33246 в Apache RocketMQ. Структура проекта org/example/Main.java: Основной файл программы. org/apache/rocketmq/common/BrokerConfig.java: Модифицированная версия официального...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246：Apache RocketMQ 원격 명령 실행 취약점 탐지 도구 도구 기능 간단 사용 실행 ./apacherocketmqcve202333246scannerlinuxamd64 scan 출력에 취약점 존재 여부: 예 또는 VulnFound: true 이면 취약점이 존재함을 의미합니다. Version 또는 버전 번호 필드는 도구가 탐지한 자산의 버전입니다. 탐지 데이터를 json 파일로 출력 실행 apacherocketmqcve202333246scannerlinuxamd64 sca...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ リモートコード実行脆弱性CVE-2023-33246 Exploit 使用方法: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" 本ツールの特徴...

CVE-2023-33246-Copy

1. Справочные материалы CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Локальная настройка окружения 2.1 Загрузка образов root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Запуск broker, namesrv, console Запуск namesrv...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ...

VulnCheck KEV: CVE-2023-37582

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

Muhstik botnet exploits a critical Apache RocketMQ flaw CVE-2023-33246 for remote code execution, targeting Linux servers and IoT devices for DDoS attacks and cryptocurrency mining. Infection involves executing a shell script from a remote IP, downloading the Muhstik malware binary "pty3", and...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-33246RocketMQRCEEXP CVE-2023-33246 RocketMQ Remote...

Attacks, Vulnerabilities and Actors 4 September to 10 September 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of ten executed attacks, one instance of adversary activity, and six vulnerabilities...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...

Arbitrary Code Injection

org.apache.rocketmq, rocketmq-namesrv is vulnerable to Remote Code Execution RCE. The vulnerability exists because the library allows updating the config path at runtime, allowing an attacker to inject and execute malicious code through the update configuration function by forging the RocketMQ...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-37582EXPLOIT Apache RocketMQ Arbitrary File Write Vu...

Design/Logic Flaw

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...

Apache RocketMQ 5.1.0 Arbitrary Code Injection Exploit

RocketMQ versions 5.1.0 and below are vulnerable to arbitrary code injection. Broker component of RocketMQ is leaked on the extranet and lack permission verification. An attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that...

Metasploit Weekly Wrap-Up

Apache RocketMQ We saw some great teamwork this week from jheysel-r7 and h00die to bring you an exploit module for CVE-2023-33246. In Apache RocketMQ version 5.1.0 and under, there is an access control issue which the module leverages to update the broker's configuration file without...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-33246 Apache RocketMQ remote code execution vulnera...

CVE-2023-33246

creationtimestamp| type| source ---|---|--- 2023-05-30 15:17:54+00:00| published-proof-of-concept| https://t.me/dilagrafie/3071 2023-05-30 15:54:33+00:00| published-proof-of-concept| https://t.me/proxybar/1551 2023-06-01 02:21:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4466...