9 matches found
CVE-2021-25646
CVE-2021-25646 Apache Druid Remote Code Execution Vulnerability Wker Script Under development... ===================================================================================== First of all, thanks to Wker for the remote assistance. The purpose of writing the script is for practice. Usage T...
log4j-Scan-Burpsuite
log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...
Apache-Log4j2-RCE
Apache Log4j2 RCE Verification Environment Since from 2021.12.09 Some References https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Setting up the Environment Maven introduces related packages and vulnerable version range root@kitploit: org.apache.logging.log4j log4j-api 2.14.1...
CVE-2021-22205
CVE-2021-22205 CVE-2021-22205 RCEツールは共有・交流のみを目的としており、無許可テストに使用しないでください。作者は一切責任を負いません。 root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string reverse shell host -m string Method for using of...
log4j2burpscanner
log4j2burpscanner CVE-2021-44228、log4j2 Burpプラグイン Java版。dnslogはdnslog.cn以外のドメインを選択しています。 効果は以下の通りです： ラボ環境の （ラボ環境は遅いですが、インターネット資産では問題ありません。原因はおそらく、ラボ環境が他のリクエストヘッダーの処理が苦手、またはリクエストヘッダーが大きすぎて反応が遅いためです。少し待てば大丈夫です） SRCのサイトを2つ試しました。...
POC-bomber
🔥 POC-bomber 🦄 POC bomber is a vulnerability detection/exploitation tool designed to quickly gain permissions on target servers by leveraging a large number of high-impact vulnerability POCs/EXPs This project collects various high-impact vulnerabilities from the internet, such as RCE · arbitrary...
CVE-2021-42237-SiteCore-XP
CVE-2021-42237-SiteCore-XP Similarly, put the URLs to be detected in target.txt Register and modify the DNSLOG platform yourself...
