2894 matches found
CVE-2024-0012-POC
This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...
CVE-2024-3400-pot
CVE-2024-3400-pot Simple honeypot for CVE-2024-3400 Palo Alto PAN-OS Command Injection Vulnerability. Features Simulate when visiting the /global-protect/login.esp login page of the GlobalProtect Portal Simulate HTTP request POST /ssl-vpn/hipreport.esp & Cookie:...
CVE-2024-9465
CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Proof of concept to exploit CVE-2024-9465 on vulnerable devices. Blog Post Root cause and indicators of compromise here: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Usage root@kitploi...
CVE-2017-15944-POC
CVE-2017-15944-POC POC For CVE-2017-15944 Palo Alto Networks firewalls remote root code execution Usage root@kitploit: python panos-poc.py https://panip...
CVE-2024-9464
CVE-2024-9464: حقن أوامر بعد المصادقة في Palo Alto Expedition إثبات مفهوم لاستغلال ثغرة CVE-2024-9464 على الأجهزة المعرضة للخطر. يجمع هذا السكربت بين إعادة تعيين المسؤول في CVE-2024-5910 لتحقيق تنفيذ أوامر عشوائي "بدون مصادقة". مقالة المدونة السبب الجذري ومؤشرات الاختراق متاحة هنا:...
CVE-2024-3400
CVE-2024-3400 Author: wa6n3r | GitHub | Web Description Tool for automated exploitation of the CVE-2024-3400 vulnerability in Palo Alto Networks PAN-OS devices. Supports multithreaded scanning, automatic artifact download, and detailed logging. !!!Important : Use only on systems for which you hav...
Unit42-Threat-Intelligence-Article-Information
Unit42-Threat-Intelligence-Article-Information Este é o repositório de indicadores de comprometimento IOCs e outros dados que apoiam os artigos de inteligência de ameaças publicados no site Unit 42 da Palo Alto Networks...
CVE-2024-3400-RCE-Scan
Cyberspace Mapping Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...
cve-2024-3400-poc
cve-2024-3400-poc Semplice POC per CVE-2024-3400 basato sull'articolo https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/...
CVE-2024-3400
PAN-OS CVE-2024-3400 检查 概述 仅供内部使用 该脚本检查Palo Alto Networks防火墙上是否存在CVE-2024-3400 PAN-OS漏洞利用的证据。 CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs: https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/ 要求 Python 3.6+ netmiko 库 tqdm 库 安装 1. 克隆仓库：git clone...
PaloAltoRceDetectionAndExploit
PaloAlto Rce Detection And Exploit Rilevamento per la vulnerabilità CVE-2017-15944 Fino ad ora nessuno scanner di vulnerabilità rileva la vulnerabilità Rilevamento e sfruttamento...
CVE-2025-0108
CVE-2025-0108 - Script PoC PAN-OS /!\ Disclaimer: Questo script è fornito "così com'è" ed esclusivamente a scopo educativo. Gli utenti sono vivamente invitati a prestare attenzione e a utilizzarlo nel rispetto dei limiti legali ed etici. Descrizione Scanner di vulnerabilità in Python progettato p...
CVE-2025-0133-exploit
CVE-2025-0133 Scan Uno script scritto in Python per verificare l'esistenza di una vulnerabilità di Reflected Cross-Site Scripting CVE-2025-0133 che si verifica in Palo Alto. Il file getconfig.esp viene rilevato e testato per XSS utilizzando lo script fornito. Utilizzo: root@kitploit:...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 Palo Alto OS-Befehlseinschleusung senden Sie diese HTTP-Anfrage: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...
CVE-2024-3400
CVE-2024-3400 Descrizione Una vulnerabilità di iniezione di comandi, derivante da una debolezza di creazione arbitraria di file nella funzionalità GlobalProtect del software PAN-OS di Palo Alto Networks, per specifiche versioni di PAN-OS e distinte configurazioni di funzionalità, può consentire a...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 : Palo Alto OS कमांड इंजेक्शन - अवधारणा का प्रमाण POC अस्वीकरण यह सुरक्षा इंजीनियरिंग और भेद्यता मूल्यांकन टीमों के लिए एक उपकरण है जो पर्यावरण में अपनी संपत्तियों पर भेद्यता के अस्तित्व को शीघ्रता से सत्यापित कर सके।...
cve-2025-0133
Scanner CVE-2025-0133 Scanner per la vulnerabilità XSS riflessa in Palo Alto PAN-OS GlobalProtect. Caratteristiche Scansione singolo target e di massa Multi-thread configurabile Supporto proxy Burp, ZAP, ecc. Output colorato con riepilogo Salva gli URL vulnerabili su file Installazione Via pip da...
CVE-2024-3400
CVE-2024-3400 Rilevamento dei dispositivi Palo Alto vulnerabili alla CVE-2024-3400. root@kitploit: options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...