CVE-2024-3400

This repository does not have a README...

cve-2024-3400-poc

cve-2024-3400-poc Simple POC for CVE-2024-3400 based on the article https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/...

CVE-2024-3400-Checker

Palo Vulnerability Check - CVE-2024-3400 Overview This script is designed to check for signs of compromise in Palo systems, specifically for the vulnerability identified as CVE-2024-3400. It searches through tech support package gz or .tgz archive files for specific log entries that may indicate ...

CVE-2024-3400-Check

Description 1. Perform a POST request to the /ssl-vpn/hipreport.esp endpoint. 2. Perform a GET request to /global-protect/portal/images/sxy.txt to check if the exploitation allows access to the file, which would typically be forbidden 403 Forbidden status. Prerequisites You need Python 3.6 or new...

SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

SOC274 - Palo Alto Networks PAN-OS Command Injection Lab Overview This repository contains supporting materials for the SOC274 lab exercise focusing on Palo Alto Networks PAN-OS Command Injection vulnerability. Lab Walkthrough For a detailed walkthrough of this Let's Defend SOC lab, please refer...

CVE-2024-3400

CVE-2024-3400 Detección de dispositivos Palo Alto vulnerables a CVE-2024-3400. root@kitploit: options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Investigando un intento de inyección de comandos en PAN-OS CVE-2024-3400 Resumen Este proyecto documenta la investigación de un intento de inyección de comandos CVE-2024-3400 dirigido al servicio PAN-OS GlobalProtect. El objetivo era determinar: si se trata de un ataque real si se produjo la...

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. root@kitploit: python3 -m pip install -r requirements.txt 2. Run root@kitploit: python3 main.py 3. Set threads in main.py, default is 20...

Global-Protect_VPN_Vuln

CVE-2024-3400 This program was improved upon to include a safety-feature which will catch the cases that will cause this script to be caught in from excuting indefinitely. The base script was created by retkoussa and referenced here. Problem with the previous script:- The script fails if the...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 POC written in Rust and Python...

cve-2024-3400

This repository does not have a README...

cs50-cyber-paloalto-oauth

CS50 Cybersecurity Final Project Title: The Salesloft OAuth Breach & CVE-2024-3400 Palo Alto impact Author: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Files presentation.pdf — slides script.txt — speaker notes Summary...

CVE-2024-3400

This repository does not have a README...

CVE-2024-3400-PoC

This repo contains a script to set up the safe environment for exploitation and a script that is responsible for carrying out the exploitation stages of: CVE-2024-3400 Palo Alto Firewall Test Environment This repository provides a shell script that allows you to quickly set up a test environment...

CVE-2024-3400-Canary

CVE-2024-3400 Código PoC ¿No hemos aprendido de HoneyPoC? Uso Apunte el script al host: python3 Poc.py...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- Introduction CVE‑2024‑3400 is a critical CVSS 10.0 command‑injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN‑OS, first disclosed on April 12, 2024 github.com+10 Investigatio...

-CTT-PAN-OS-EXPLOIT-CVE-2024-340

-CTT-PAN-OS-EXPLOIT-CVE-2024-340 CTT-PAN-OS-Exploit – CVE-2024-3400 CVSS 10.0 con mejora de la Teoría del Tiempo Convergente. Utiliza α = 0.0302011 de dispersión temporal, cascada de resonancia de fase de 33 capas y filtrado de cuña temporal de 11 ns para explotar la inyección de comandos de Palo...

CVE-2024-3400-Compromise-Checker

CVE-2024-3400 Compromise Checker A very simple bash script to check for evidence of compromise related to CVE-2024-3400 on Palo Alto Firewalls. Designed to provide a quick initial triage of potentially impacted devices by checking for the existence of artefacts outlined in the Volexity writeup an...

panrapidcheck

PAN Rapid Check Simpleyou should probably just do this in bash with grep PANOS support file checker that extracts some places to look for CVE-2024-3400 IoCs Generate the support file from Device - Support - Generate Tech Support file iocs.txt should include IPs/hosts from known bad for example...