EagleEye

EagleEye： 随着 Project Discovery 在 HTTPX 中添加了 -ss 选项，现在可以使用 gf xss 和 qsreplace 配合 XSS payload（例如 alerthacked）来创建可能易受攻击的 URL 列表。然后 HTTPX 会访问所有 URL 并截取屏幕截图，这些截图存储在 output/screenshot/indexscreenshot.txt 中。 要从截图中过滤出真正存在漏洞的 URL，可以使用 ee.sh 脚本。只需运行 ./ee.sh -f "path/to/indexscreenshot.txt" -k...

EagleEye

root@kitploit: $$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$...

EagleEye

EagleEye - 基于主机的入侵检测与网络监控系统 该项目目前仍需大量工作才能投入使用，因为这是我的毕业设计，所以并非用户友好型，仅限有经验的用户使用，目前为测试版。我将它发布/制作出来仅用于教育目的！ EagleEye 由两部分组成： 客户端（Client） 用 Go 语言编写 用途: 捕获设备上的每个数据包，提取常见协议中的重要细节，最后将所有收集到的数据发送到主控端（如果主控端在线）。 使用: 应安装在你想要监控的每个设备上（例如：公司员工的设备）。 主控端（Master） : 用 Python 和 Bootstrap 编写 用途: 接收客户端发送的每个数据包，在 GUI...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

EUVD-2022-31037

Malicious code in bioql PyPI...

CloudPanel 2.2.2 Privilege Escalation / Path Traversal Exploit

CloudPanel versions 2.0.0 through 2.2.2 suffer from a privilege escalation vulnerability when a traversal is leveraged against clpctlWrapper for which all normal users have sudo access. Title : Privilege Escalation through path traversal CVE ID : CVE-2023-33747 Exploit Author : EagleEye Github :...

CloudPanel 2.2.2 Privilege Escalation / Path Traversal

Title : Privilege Escalation through path traversal CVE ID : CVE-2023-33747 Exploit Author : EagleEye Github : https://github.com/EagleTube/CloudPanel/tree/main/CVE-2023-33747 Version Affected : CloudPanel v2.0.0 - v2.2.2 Vendor : CloudPanel.io Date : 31/05/2023 , 12:00 PM Step : Login as ssh as...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

Command injection

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

Authentication flaw

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...

CVE-2022-26482

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...

CVE-2022-26482

Poly EagleEye Director II (pre-2.2.2.1) exposes an OS command injection via os.system that can be performed by an admin. Affected product/version: Poly EagleEye Director II prior to 2.2.2.1. Impact (per NVD): high severity (CVSSv3.1 base score 7.2) with high confidentiality, integrity, and availa...

CVE-2022-26479

Poly EagleEye Director II (pre-2.2.2.1) contains an authentication bypass vulnerability where the existence of a certain file (creatable via an rsync backdoor) causes all API calls to run with admin privileges. Affected component/file path is unspecified in the initial documents; root cause is an...

CVE-2022-26479

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...