SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Exploit-della-vulnerabilità-di-command-injection-CVE-2024-3400- Introduzione CVE‑2024‑3400 è una vulnerabilità critica CVSS 10.0 di command injection nella funzionalità GlobalProtect di Palo Alto Networks PAN‑OS, divulgata per la prima volta il 12 aprile 2024...

Kaonashi

Progetto Kaonashi: RootedCON 2019 Questo repository contiene diverse directory: Maschere ordinate per hashcat Regole avanzate per hashcat Link per scaricare le Wordlist di Kaonishi Slide usate nel nostro talk I know your p4$$w0rd and if I don't, I will guess it... a RootedCON 2019 Potrebbe non...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerabilità CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerabilità RCE PoC/ Script di test...

CVE-2023-36845

CVE-2023-36845 Una vulnerabilità di modifica di variabili esterne PHP in J-Web di Juniper Networks Junos OS sulle serie EX e SRX consente a un attaccante non autenticato, con accesso di rete, di controllare determinate variabili d'ambiente. Utilizzo dello Script root@kitploit: $ dos2unix...

CVE-2020-16152

CVE-2020-16152 Riepilogo | ---|--- Produttore| Aerohive Networks / Extreme Networks Nome prodotto...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

wardriving

Wardriving Hier findest du alle Daten zum Wardriving-Workshop von Ekoparty 2017. Faraday-Plugins Die Dateien, die mit import beginnen, sind alle Module, die mit dem Faraday-Plugin verwendet werden. Um sie auszuführen, lade sie herunter und kopiere sie in dein faradayinstallation/bin/. Weitere...

CVE-2024-3400

Script di Exploit per Firewall PAN-OS Questo script è progettato per dimostrare lo sfruttamento delle vulnerabilità nei firewall PAN-OS. Invia un payload appositamente costruito all'endpoint API del firewall per eseguire comandi arbitrari. Questo exploit prende di mira specificamente CVE-2024-340...

CVE-2020-2034-POC

CVE-2020-2034-POC Bestimmen Sie die auf der Palo Alto Network Firewall ausgeführte Version für das Global Protect Portal Kürzlich wurden von Palo Alto Networks eine Reihe kritischer Schwachstellen veröffentlicht: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date...

CVE-2023-36845-POC

CVE-2023-36845 Script di automazione PoC Questo script fornisce un Proof of Concept PoC automatizzato per la vulnerabilità identificata come CVE-2023-36845, che colpisce il componente J-Web di Juniper Networks Junos OS sui dispositivi delle serie EX e SRX. Dimostra la potenziale modifica remota...

offensive-onos

Offensive ONOS I miei esperimenti nell'armare applicazioni ONOS. Questa è una parte dell'attività di ricerca per la mia tesi di Laurea Magistrale in Cybersecurity link, focalizzata sulla rilevazione degli attacchi Cross App Poisoning nelle reti definite via software SDN. Questa ricerca ha inoltre...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

watchTowr-vs-JunosEvolved-CVE-2026-21902

watchTowr-vs-JunosEvolved-CVE-2026-21902 Gerador de Artefactos de Deteção para Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc Consulte a nossa publicação no blog para detalhes técnicos. Deteção em Ação root@kitploit: python...

CVE-2024-3400-

PAN-OS Firewall Befehlseinschleusung Command Injection Schwachstelle Dieses Repository enthält ein Go-Skript, das eine Befehlseinschleusungsschwachstelle in Firewalls ausnutzt, die das Betriebssystem PAN-OS von Palo Alto Networks verwenden. Die unter CVE-2024-3400 identifizierte Schwachstelle...

CVE-2025-0133

Scanner di vulnerabilità CVE-2025-0133 Uno strumento di scansione automatizzato basato su Bash per rilevare la vulnerabilità XSS riflesso CVE-2025-0133 in Palo Alto GlobalProtect Gateway & Portal utilizzando nuclei e shodanx. Autore : Data : 2025-06-23 Gravità : Media ID CVE : CVE-2025-0133 Tipo ...