redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

CVE-2021-26705: Missing Authentication for Critical Function

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

PT-2021-17102

Name of the Vulnerable Software and Affected Versions SquareBox CatDV Server versions through 9.2 Description An issue was discovered in SquareBox CatDV Server, where an attacker can invoke sensitive RMI methods, such as getConnections, without authentication. The results of these methods can be...