32 matches found
GeoServer-Tools-CVE-2024-36401
GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 Graphical Exploitation Tool, supports exploitation across various JDK versions, as well as echo and memory shell implementation. Affected versions: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recently during HW Red/Blue team...
CVE-2024-36401_Geoserver_RCE_POC
Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...
CVE-2024-36401-WoodpeckerPlugin
CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...
geoserver-
geoserver CVE-2024-36401 エクスプロイトツール geoserver CVE-2024-36401 環境: JDK8 宣言: 許可されたテストにのみ使用し、ユーザーによる悪用の結果はすべて作者の責任ではありません。法律と規制を遵守してください! 1, デフォルトペイロード: POST /geoserver/wfs HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/124.0.6367.118...
GeoServerExploit
GeoServerExploit A vulnerability exploitation tool for GeoServer CVE-2024-36401/CVE-2024-36404 This project was jointly developed by @hony and @wh!te?be6ar. If you find this project helpful, please don't forget to give it a 🌟Star to show your support. Thank you. Usage Example Acknowledgements...
CVE-2024-36401
CVE-2024-36401 This is a program for checking the vulnerability of CVE-2024-36401. Usage First, execute the following command to listen for incoming connections. root@kitploit: nc -lvnp 9000 Then, execute the file in another terminal window. root@kitploit: python CVE-2024-36401.py --target...
CVE-2024-36401
CVE-2024-36401: GeoServer Unauthenticated Remote Code Execution Exploiter a Vulnerability detection and Exploitation tool for GeoServer Unauthenticated Remote Code Execution CVE-2024-36401. Installation root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-36401.git cd...
CVE-2024-36401
CVE-2024-36401 Usage root@kitploit: python3 exploit.py Enter host e.g., https://example.com/: https://target.com/ Enter IP: Your IP Public/Host Ngrok Enter Listing Port: Your Port Listen...
CVE-2024-36401
GeoServer Blind Remote Code Execution Vulnerability CVE-2024-36401 options: -h, --help show this help message and exit -u URL, --url URL Target URL; Example: python .py -u http://ip:port -f FILE, --file FILE Target urllist; Example: python .py -f urllist.txt -c CMD, --cmd CMD Target command;...
CVE-2024-36401-MASS
This repository does not have a README...
CVE-2024-36401-PoC
CVE-2024-36401-PoC This repository contains a Proof of Concept PoC script for CVE-2024-36401, a vulnerability that can be exploited to gain remote code execution on the target server. Features Assign a reverse shell listener using Perl. Encode commands using Base64. Make requests to the target...
Exploit for Code Injection in Geoserver
CVE-2024-36401 GeoServer Exploit Tool Vulnerability Descri...
Exploit for Code Injection in Geoserver
CVE-2024-36401 Usage bash python3 e...
Exploit for Code Injection in Geoserver
CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...
Exploit for Code Injection in Geoserver
CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
Exploit for Code Injection in Geoserver
CVE-2024-36401 vulnerability graphical exploitation t...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401...