CVE-2023-35078

CVE-2023-35078 Ivanti Endpoint Manager Mobile EPMM POC Usage python3 CVE-2023-35078.py -u https://url.com pytohn3 CVE-2023-35078.py -f urls.txt...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282 Command: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Reference:...

ivantiunlocker

ivantiunlocker Prevent CVE-2025-22457 and other security problems with Juniper/Ivanti Secure Connect SSL VPN Many security issues around SSL VPN devices recently. You can't feel safe anymore. And then there is CVE-2025-22457 ! Read the story behind it :...

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE This script helps identify Ivanti Connect Secure, Policy Secure, or ZTA Gateways that may be vulnerable to CVE-2025-22457 , a critical unauthenticated stack-based buffer overflow in the web process...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

Ivanti-Connect-Secure-Logs-Parser

Ivanti Secure Connect Logs Parser This repository provides a Python script designed to convert Ivanti Secure Connect .vc0 log files into CSV format for digital forensics and incident response. In particular, the parser: Extracts timestamps from Ivanti log files notably from .vc0 files. Converts...

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: jq -cr 'select.http.favicon.hash ==...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

IvantiInitrdDecryptor

Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

CVE-2024-29847

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-29847 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ Usage...

CVE-2023-41474

IVANTI AVALANCHE - PATH TRAVERSAL A new vulnerability has been found on Ivanti Avalanche. Tested on Avalanche Server v6.3.4.153 and identified as CVE-2023-41474. It’s a limited unauthenticated path traversal vulnerability, meaning that unauthorized attackers can access to any file under C:\PROGRA...

pulse-meter

Pulse Meter This is a work in progress for parsing the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282. Caveat : False positives are possible so it's best to check manually to verify any results. Note...

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...

CVE-2023-38035

CVE-2023-38035 POC for CVE-2023-38035 affecting Ivanti Sentry Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive Summary This POC abuses an unauthenticated command...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

krustyloader-analysis

KrustyLoader Analysis This repository contains resources related to the analysis made on KrustyLoader and available on this blog post: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. a Python script to extract and decrypt URL used by th...