31 matches found
GenCrushSSTIExploit
ES GenCrushSSTIExploit es una herramienta de explotación PoC dirigida a la vulnerabilidad SSTI Server-Side Template Injection en CrushFTP CVE-2024-4040. Esta herramienta demuestra cómo explotar esta vulnerabilidad únicamente con fines educativos y de hacking ético. Características Establece una...
CVE-2024-4040
此存储库没有 README。...
CrushFTP-cve-2024-4040-poc
CrushFTP-cve-2024-4040-poc...
CVE-2024-4040
CVE-2024-4040 CVE-2024-4040 漏洞利用程序...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP 身份验证绕过漏洞利用 本仓库包含一个隐蔽的 Python 概念验证（PoC）漏洞利用程序，针对 CVE-2024-4040 ，这是 CrushFTP（v10 及以下版本）中的一个关键漏洞，允许攻击者使用伪造的 CrushAuth cookie 和 AWS 风格的 Authorization 标头绕过身份验证。 🚨 漏洞摘要 未经身份验证的攻击者可以通过构造特定的 cookie/标头组合，绕过存在漏洞的 CrushFTP 实例的身份验证，从而未经授权访问内部 Web 功能。 CVE ID ：CVE-2024-4040 严重性 ：严重（CVS...
CVE-2024-4040
此存储库没有 README。...
CrushFTP-CVE-2024-4040-Proof-of-Concept
CVE-2024-4040 漏洞 — CrushFTP SSTI / LFI 概念验证 仅用于教育和授权的实验室环境。 适用于 CS443 软件与系统安全模块。实验在受控的本地 Docker 环境中进行。 漏洞摘要...
CrushFTP10-Docker-CVE-2024-4040
Despliegue de Docker de CrushFTP 10.0 vulnerable a CVE-2024-4040 Este repositorio proporciona un Dockerfile para construir una imagen Docker y desplegar un contenedor Linux con un servidor CrushFTP que es vulnerable a la Vulnerabilidad de Escape del Sandbox VFS de CrushFTP CVE-2024-4040. ⚠️ Aviso...
CrushFTP-SSTI-LFI-Proof-of-Concept
CVE-2024-4040 — CrushFTP SSTI / LFI Prueba de Concepto Solo para uso educativo y de laboratorio autorizado. CS443 Seguridad de Software y Sistemas — entorno Docker local controlado. Resumen de la vulnerabilidad...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Path Traversal in Lakernote Easyadmin
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Code Injection in Crushftp
EN GenCrushSSTIExploit is a PoC exploit tool targeting the...
Exploit for Code Injection in Crushftp
CVE-2024-4040 A server side template injection vulnerability i...
Exploit for Code Injection in Crushftp
CVE-2024-4040: CrushFTP File Read Vulnerability Overview...
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040
Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: 9.x versions before 10.7.1 11.1.0 The CVSS score is 9.8. The vulnerability allows remote attackers to bypass the VFS...
Exploit for Code Injection in Crushftp
Exploit Code for CVE-2024-4040 Overview This exploit code t...
Exploit for Code Injection in Crushftp
CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi...
