sjet

sJET by siberas siberas JMX Exploitation Toolkit sJET allows an easy exploitation of insecure configured JMX services. Additional background information can be found here and here. Prerequisites Jython 2.7 Usage SJET implements a CLI interface using argparse: root@kitploit: jython sjet.py...

mjet

MJET by MOGWAI LABS MOGWAI LABS JMX Exploitation Toolkit MJET هو تفرّع من sjet، الذي طوّرته شركة siberas ولكن لم يعد يُصان بنشاط. يتم صيانة MJET بواسطة فريق MOGWAI LABS الذي قدّم أيضًا معظم الشيفرة الأصلية لـ sjet. يتيح MJET استغلالاً سهلاً لخدمات JMX غير الآمنة التكوين. يمكن العثور على معلومات...

mjet

mjet مجموعة أدوات Mogwai Security لاستغلال امتدادات إدارة Java JMX mjet هي أداة يمكن استخدامها لحماية خدمات JMX ذات الإعدادات غير الآمنة. وهي مبنية على مقالة "Exploiting JMX-RMI" بقلم Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" ويمكن استخدامها لتنفيذ حمولات Metasploit...

Pega Platform 8.1.0 - Remote Code Execution Vulnerability

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat Enterprise 7 CVE : CVE-2022-24082...

Pega Platform 8.7.3 Remote Code Execution Vulnerability

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to uplo...

Pega Platform 8.7.3 Remote Code Execution

Exploit Title: Pega Platform 8.1.0 and higher Remote Code Execution Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.7.3 Tested on: Re...

Apache Mina 2.0.13 - Remote Command Execution

Apache Mina 2.0.13 - Remote Command Execution Source: https://remoteawesomethoughts.blogspot.com/2016/09/apache-mina-2013-remote-command.html Apache Mina 2.0.13 uses the OGNL library in the “IoSessionFinder” class. Its constructor takes into parameter one OGNL expression. Then this expression is...