mjet

由 MOGWAI LABS 出品的 MJET MOGWAI LABS JMX 利用工具包 MJET 是 sjet 的一个分支，后者由 siberas 开发，但已不再积极维护。MJET 由 MOGWAI LABS 团队维护，该团队也提供了原始 sjet 代码库的大部分内容。 MJET 可以轻松利用配置不安全的 JMX 服务。更多背景信息可在此处和此处找到。 !!! 重要：此项目不再维护 此仓库不再积极维护 。我们建议改用 qtcs beanshooter。 前提条件 Jython 2.7 Ysoserial（用于通过 JMX 利用反序列化漏洞）...

Pega Platform 8.1.0 - Remote Code Execution Vulnerability

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat Enterprise 7 CVE : CVE-2022-24082...

Pega Platform 8.1.0 - Remote Code Execution (RCE)

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat...

Pega Platform 8.7.3 Remote Code Execution Vulnerability

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to uplo...

Pega Platform 8.7.3 Remote Code Execution

Exploit Title: Pega Platform 8.1.0 and higher Remote Code Execution Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.7.3 Tested on: Re...