WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 Repository with everything I have tracking the impact of WSFTP CVE-2023-40044 Includes possibly affected organizations and domains utilizing header methods. I've also built a news ticker which tracks new stories about MOVEit and WSFTP, available at...

Progress-MOVEit-Transfer-2020.1-Stored-XSS-CVE-2020-28647

Progress MOVEit Transfer 2020.1 Stored XSS CVE-2020-28647 During a recent web application test engagement one of the applications in scope was a MOVEit Transfer 2020 web application. While performing the assessment a Stored Cross-Site Scripting XSS vulnerability was identified. This blog post wil...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 Repository with everything I have tracking the impact of MOVEit CVE-2023-34362 Includes possibly affected organizations and domains utilizing SFTP header and cookie discovery methods. I've also built a news ticker which tracks new stories about MOVEit, available at...

MOVEit-Exploit

Exploit MOVEit un exploit de prueba de concepto POC para CVE-2023-34362 que afecta a MOVEit Transfer Nota: Este proyecto está finalizado... Nuestra página de Instagram . Nuestro canal de YouTube . Nuestra página de Twitter CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Aviso...

MOVEit_CVE-2023-34362_IOCs

IOCs de MOVEit CVE-2023-34362 Más información en el blog de Deep Instinct. Descargo de responsabilidad El código proporcionado se ofrece tal cual y está destinado exclusivamente a fines educativos o informativos. El usuario asume toda la responsabilidad por el uso de este código y cualquier...

MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. ​Detailed analysis of the 2023 MOVEit Transfer data breach CVE-2023-34362 for CS50 Cybersecurity. This project explores the technical impact of unauthenticated SQL Injection and its consequences for global data privacy, affecting 2,700+ organizations. Special...

MoveIT-CVE-2023-34362-RCE

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby move.rb ruby move.rb 192.168.86.111 + Starting. target='https://192.168.86.111'. + Retrieved initial session token...

CVE-2023-34362

CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Análisis Técnico Se puede encontrar un análisis técnico de la causa raíz de la vulnerabilidad en nuestro blog: https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ Resumen Este POC abusa ...

CVE-2024-5806

CVE-2024-5806 progress moveit cve-2024-5806...

MOVEit-CVE-2023-34362

This repository does not have a README...

Tryhackme_Billing

TryhackmeBilling Billing CTF MachineCVE-2023-30258Remote Code Execution...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5806. See our blog post at TBD. PoC in Action See --help for, well, help. A typical run should look like this: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ ...

moveit-transfer-cve-2023-34362

🔍 Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 A video presentation analysing the technical details, scale and lessons to be learned from the MOVEit CVE-2023=3462CS50 Introduction to Cyber Security Finale Project Video Link : https://youtu.be/EsyWXNcmNQY...

CVE-2023-34362

CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Análisis técnico Un análisis técnico de causa raíz de la vulnerabilidad se puede encontrar en el blog: Resumen Este POC explota una inyección SQL para obtener un token de acceso de API de sysadmin y luego utiliza ese acceso para...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

moveit-transfer-2023-breach

MOVEit Transfer 2023 Mass Data Breach Incident Details Incident Date: May–June 2023 CVE: CVE-2023-34362 Attack Type: SQL Injection Threat Actor: Cl0p ransomware group Summary In May 2023, a SQL injection vulnerability in MOVEit Transfer was exploited to exfiltrate sensitive data from hundreds of...

moveit-payload-decrypt-CVE-2023-34362

moveit-payload-decrypt-CVE-2023-34362 This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload...

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer RCE no autenticado Para una descripción técnica completa de la vulnerabilidad y explotación, lea nuestro Análisis de AttackerKB. Uso root@kitploit: ruby CVE-2023-34362.rb Nota: El gadget de deserialización está configurado para ejecutar 'notepad.exe'. Ejemplo...