graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

CVE-2021-3129

CVE-2021-3129 Mass Scan Tools For Laravel = V8.4.2 Debug Mode Remote Code Execution RCE | Python Reference Ambionics.io PHPGCC Chain PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 Environment...

Laravel-debug-Checker

Laravel-debug-Checker CVE-2021-3129 Checker By ./MrMad Refrence : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 install module root@kitploit: python -m pip install -r requirements.txt installation on linux root@kitploit: git clone...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Vulnerability Overview When Laravel's debug mode is enabled, due to the unsafe use of the filegetcontents and fileputcontents functions by Laravel's built-in Ignition component, an attacker can trigger Phar deserialization by sending malicious requests,...

CVE-2021-3129

CVE-2021-3129 Laravel debug mode - Remote Code Execution RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Example root@kitploit: python3 exploit.py http://127.0.0.1:8080 root@kitploit: python3 exploit.py...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py This script first identifies the version to determine if it is a vulnerable version, then attempts to confirm whether the log file exists. If it exists, it will try to send a request and then request the log file again to search for...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

CVE-2021-3129

CVE-2021-3129 Unauthenticated RCE in Laravel Ignition via File Upload Summary of the CVE In affected versions of Laravel Ignition a attack can execute arbitrary code because of the insecure usage of filegetcontents and fileputcontents. This is only exploitable for websites that use debug mode...

laravelN00b

laravelN00b Una configuración incorrecta permite acceder a archivos .env o leer variables de entorno. LaravelN00b escanea automáticamente archivos .env y verifica el modo de depuración en el host víctima. Fundamentos del escaneo Escanear host. Resolver la dirección IP y verificar el archivo .env ...

CVE-2021-3129-exp

Laravel Debug Mode RCE Vulnerability CVE-2021-3129 POC / EXP CVE-2021-3129 EXP / POC ⚠️ Note: Due to the fact that exploitation and detection of this vulnerability require multiple requests, the process may be slow. Usage: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -u ur...

CVE-2021-3129

CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment root@kitploit: $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit root@kitploit: $ docker-compo...

dbdtct

dbgdtct Descripción dbgdtct es una herramienta basada en Python diseñada para ayudarte a detectar si una aplicación web está desplegada en modo de depuración—una configuración incorrecta crítica que puede exponer información sensible y aumentar el riesgo de explotación en entornos de producción...

CVE-2024-27914

CVE-2024-27914: Reflected XSS in debug mode of GLPI An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. Package - GLPI...

naga

naga malware detonation..actually running in debug/verbose mode .. video-1 https://github.com/user-attachments/assets/40a30755-164e-4b7d-a1d7-b0df4ea20d1b shot-1 shot-2 shot-3 shot-4...

CVE-2026-19985

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug Mode RCE Lab Hands-on lab for exploiting CVE-2021-3129 - a critical Laravel vulnerability allowing unauthenticated file read and potential RCE. Quick Start root@kitploit: Clone git clone https://github.com/theNareshofficial/CVE-2021-3129-Lab.git cd CVE-2021-3129-Lab...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Use： root@kitploit: python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use...

laravel-8.4.2-rce

laravel-8.4.2-rce Setup enviroment root@kitploit: git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve Usage root@kitploit: python3 exploit.py http://pwnme.me:8000...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Modified from @crisprss's https://github.com/crisprss/LaravelCVE-2021-3129EXP , added more available gadgets for traversal Use： root@kitploit: python3 exp.py http://127.0.0.1:8888 Preview： root@kitploit:...