panrapidcheck

PAN Rapid Check Simpleyou should probably just do this in bash with grep PANOS support file checker that extracts some places to look for CVE-2024-3400 IoCs Generate the support file from Device - Support - Generate Tech Support file iocs.txt should include IPs/hosts from known bad for example...

CVE-2024-3400

CVE-2024-3400 Finding Palo Alto devices vulnerable to CVE-2024-3400. options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...

cs50-cyber-paloalto-oauth

CS50 Cybersecurity Final Project Title: The Salesloft OAuth Breach & CVE-2024-3400 Palo Alto impact Author: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Files presentation.pdf — slides script.txt — speaker notes Summary...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- Introduction CVE‑2024‑3400 is a critical CVSS 10.0 command‑injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN‑OS, first disclosed on April 12, 2024 github.com+10 Investigatio...

CVE-2024-3400-Compromise-Checker

CVE-2024-3400 Compromise Checker A very simple bash script to check for evidence of compromise related to CVE-2024-3400 on Palo Alto Firewalls. Designed to provide a quick initial triage of potentially impacted devices by checking for the existence of artefacts outlined in the Volexity writeup an...

CVE-2024-3400-Canary

CVE-2024-3400 PoC Code Have we not learnt from HoneyPoC? Usage Point script at host: python3 Poc.py...

CVE-2024-3400-Check

Description 1. Perform a POST request to the /ssl-vpn/hipreport.esp endpoint. 2. Perform a GET request to /global-protect/portal/images/sxy.txt to check if the exploitation allows access to the file, which would typically be forbidden 403 Forbidden status. Prerequisites You need Python 3.6 or new...

CVE-2024-3400

This repository does not have a README...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 POC written in Rust and Python...

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye app:"Palo Alto Networks firewall httpd"...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. python3 -m pip install -r requirements.txt 2. Run python3 main.py 3. Set threads in main.py, default is 20 workers...

CVE-2024-3400-PoC

This repo contains a script to set up the safe environment for exploitation and a script that is responsible for carrying out the exploitation stages of: CVE-2024-3400 Palo Alto Firewall Test Environment This repository provides a shell script that allows you to quickly set up a test environment...

-CTT-PAN-OS-EXPLOIT-CVE-2024-340

-CTT-PAN-OS-EXPLOIT-CVE-2024-340 CTT-PAN-OS-Exploit – CVE-2024-3400 CVSS 10.0 with Convergent Time Theory enhancement. Uses α = 0.0302011 temporal dispersion, 33-layer phase resonance cascade, and 11 ns temporal wedge filtering to exploit Palo Alto GlobalProtect command injection. The payload is...

cve-2024-3400

This repository does not have a README...

SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

SOC274 - Palo Alto Networks PAN-OS Command Injection Lab Overview This repository contains supporting materials for the SOC274 lab exercise focusing on Palo Alto Networks PAN-OS Command Injection vulnerability. Lab Walkthrough For a detailed walkthrough of this Let's Defend SOC lab, please refer...

CVE-2024-3400-Checker

Palo Vulnerability Check - CVE-2024-3400 Overview This script is designed to check for signs of compromise in Palo systems, specifically for the vulnerability identified as CVE-2024-3400. It searches through tech support package gz or .tgz archive files for specific log entries that may indicate ...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Investigating a PAN-OS CVE-2024-3400 Command Injection Attempt Overview This project documents the investigation of a CVE-2024-3400 command injection attempt targeting a PAN-OS GlobalProtect service. The goal was to determine: whether this is a real attack whether command execution occurred wheth...

cve-2024-3400-poc

cve-2024-3400-poc Simple POC for CVE-2024-3400 based on the article https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/...

CVE-2024-3400

This repository does not have a README...

Global-Protect_VPN_Vuln

CVE-2024-3400 This program was improved upon to include a safety-feature which will catch the cases that will cause this script to be caught in from excuting indefinitely. The base script was created by retkoussa and referenced here. Problem with the previous script:- The script fails if the...