EulerOS 2.0 SP13 : sssd (EulerOS-SA-2026-4110)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPa...

EulerOS 2.0 SP11 : sssd (EulerOS-SA-2026-4382)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP...

EulerOS 2.0 SP11 : sssd (EulerOS-SA-2026-4292)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP...

Apache YuniKorn 1.9.0 LDAP Group Provider Denial of Service

Apache YuniKorn versions 1.8.0 and 1.9.0 contain an LDAP group provider denial of service vulnerability that causes a resolver panic when a memberOf attribute lacks "CN=". !/usr/bin/env bash Apache YuniKorn 1.9.0 LDAP Group Provider Panic Denial of Service Vendor: The Apache Software Foundation...

CVE-2021-44228_Log4Shell

Demo Exploiting Log4Shell Vulnerability CVE-2021-44228 This project simulates an RCE attack scenario through the Log4Shell vulnerability in the Apache Log4j 2 library. Components 1. vulnerable-app : Spring Boot application using Log4j 2.14.1. 2. attacker : Contains malicious LDAP server marshalse...

log4j-shell-poc

log4j-shell-poc Una prueba de concepto para la vulnerabilidad CVE-2021-44228 encontrada recientemente. Recientemente apareció una nueva vulnerabilidad en log4j, una librería de registro de Java muy utilizada en proyectos como elasticsearch, minecraft y muchos otros. En este repositorio hay una...

docker-log4shell

docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class docker build -t log4shell . docker run -it -v...

LOGJ4_PocShell_CVE-2021-44228

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

CVE-2021-44228-Apache-Log4j-Rce-main

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

CVE-2021-44228_Log4Shell

CVE-2021-44228Log4Shell Test source code for Log4ShellCVE-2021-44228. Step Information 1. Install JDK8 8u191 in virtual machineWindows 10. 2. Copy out\artifacts\POCjar\POC.jar in Windows. 3. Copy JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar in Windows, Get JNDI-Injection-Exploit 4. Run java -jar...

log4shell-exploitation-lab

Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Log4Shell vulnerability end to end in an isolated lab environment, from initial exploitation through to a full remediation report. Done as a paired piece of MSc coursework with Aditya Chaudhari, written up together as a joint report. What I...

CVE-2021-44228

CVE-2021-44228-POC Yet another CVE-2021-44228 POC Affected Log4j versions: from 2.0-beta9 up to 2.14.1 Prerequisites Used Java: OpenJDK 11 https://jdk.java.net/archive/ Maven required to build apps in this repo alternatively, download prepared jar files from release: https://maven.apache.org/...

msldap

🚩 Patrocinadores Si te gusta este proyecto, considera comprar licencias de OctoPwn, ¡nuestro conjunto completo de pruebas de penetración que se ejecuta en tu navegador! Para notificaciones sobre nuevas compilaciones/lanzamientos y otra información, únete a nuestro Discord msldap Librería LDAP par...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell Details : CVE-2021-44228 Usage : ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usage Show usage...

writehat

WriteHat es una herramienta de informes que elimina Microsoft Word y muchas horas de sufrimiento del proceso de generación de informes. Markdown -- HTML -- PDF. Creada por probadores de penetración, para probadores de penetración, pero puede usarse para generar cualquier tipo de informe. Escrito...

KrbRelayUp

KrbRelayUp Simple wrapper around some of the features of Rubeus and KrbRelay and a few other honorable mentions in the acknowledgements section in order to streamline the abuse of the following attack primitive: 0. Optional New machine account creation New-MachineAccount 1. Local machine account...

CVE-2021-44228-Log4j-JNDI

Access After the project starts, visit: http://127.0.0.1:9090/vul Vulnerability Reproduction JDK version: java8u92 Avoid using too high a version; it is recommended to use the same as mine, as higher versions have certain restrictions on JNDI injection java -jar...

VBA-macro-experiments

VBA macro experiments Collection of VBA macros published in our twitter / blog. If you are interested about this topic, please read our articles "Hacking in an epistolary way: implementing kerberoast in pure VBA" and "Shedding light on creating VBA macros". Also feel free to follow our twitter ;...

cve-2021-44228

CVE-2021-44228 This repository represents a simplified simulation of infamous CVE-2021-44228 issue. Aside from system properties and other dictionary structures lookups, Apache Log4j also implements JNDI lookup feature for various reasons. The JNDI can obtain services from a number of service...

ldsview

ldsview Herramienta de búsqueda sin conexión para volcados de directorios LDAP en formato LDIF. Características Análisis rápido y eficiente en memoria de archivos LDIF Construir comandos ldapsearch para extraer un LDIF de un directorio Mostrar estructura del directorio Traducción de formato de...