CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 : Palo Alto OS Command Injection - Proof of Concept POC Disclamer This is a tool for security engineering and vulnerability assessment teams to quickly verify the existance of the vulnerability on their assets across the environment...

cve-2024-0012-gui-poc

CVE-2024-0012 y CVE-2024-9474 Bypass de autenticación en la interfaz web de gestión PAN-SA-2024-0015 e inyección de comandos autenticada en Palo Alto PAN-OS. Consulte la publicación del blog para obtener detalles técnicos. Autores del exploit Exploit original escrito por Sonny de watchTowr...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto 파일 쓰기 익스플로잇 이 익스플로잇은 Global Protect URL 인스턴스를 검색하고 CVE-2024-3400을 사용하여 파일 쓰기를 시도합니다 주의해서 사용하세요 교육 목적으로만 제작되었습니다 사용법: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shodan 검색 및 URL 필터링: root@kitploit: shodan search --fields...

CVE-2025-0108-PoC

CVE-2025-0108 Proof of Concept PoC This repository contains a Proof of Concept PoC for the CVE-2025-0108 vulnerability, which is an authentication bypass issue in Palo Alto Networks' PAN-OS software. The scripts provided here test for the vulnerability by sending a crafted HTTP request to the...

CVE-2024-3400

CVE-2024-3400 PoC 仅用于教育目的。只能在获得授权测试的服务器上使用。 使用方法 依赖： root@kitploit: $ pip install rich 扫描 targets.txt： root@kitploit: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-命令注入漏洞利用-CVE-2024-3400- 介绍 CVE‑2024‑3400 是 Palo Alto Networks PAN‑OS 的 GlobalProtect 功能中的一个严重（CVSS 10.0）命令注入漏洞，于 2024 年 4 月 12 日首次披露。 github.com+10 调查与修复 为调查并修复该告警，我采取了以下步骤： 检查 SOC 工单队列并接管告警 创建案件 理解攻击 检测 分析 遏制 修复 报告产物与失陷指标（IOC） 关闭工单 以下将通过图片详细说明这些步骤。 步骤 1：检查 SOC...

CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...

CVE-2024-3400

CVE-2024-3400 작성자: wa6n3r | GitHub | 웹 설명 Palo Alto Networks PAN-OS 장치의 CVE-2024-3400 취약점을 자동으로 악용하기 위한 도구입니다. 다중 스레드 스캔, 아티팩트 자동 다운로드 및 상세 로깅을 지원합니다. !!!중요 : 테스트할 명시적 허가를 받은 시스템에서만 사용하십시오. 요구 사항 Python 3.8+ 종속성: requests=2.28.0 rich=12.0.0 urllib3=1.26.0 설치 root@kitploit: Клонирование или создан...

CVE-2024-3400

Script de Explotación de Firewall PAN-OS Este script está diseñado para demostrar la explotación de vulnerabilidades en firewalls PAN-OS. Envía un payload especialmente diseñado al endpoint de la API del firewall para ejecutar comandos arbitrarios. Este exploit apunta específicamente a...

CVE-2020-2034-POC

CVE-2020-2034-POC Determinar la versión que ejecuta el firewall de Palo Alto Networks para el Global Protect Portal Recientemente, Palo Alto Networks anunció muchas vulnerabilidades críticas aquí: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date Este es un PoC pa...

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

CVE-2024-3400-

Vulnérabilité d'injection de commandes dans le pare-feu PAN-OS Ce dépôt contient un script Go qui exploite une vulnérabilité d'injection de commandes dans les pare-feux exécutant le système d'exploitation PAN-OS de Palo Alto Networks. La vulnérabilité, identifiée sous le nom de CVE-2024-3400,...

cve-2025-0133

Scanner CVE-2025-0133 Scanner de vulnérabilité XSS réfléchi Palo Alto PAN-OS GlobalProtect. Fonctionnalités Ciblage unique et scan de masse Multithreadé configurable Support proxy Burp, ZAP, etc. Sortie colorée avec résumé Sauvegarde des URLs vulnérables dans un fichier Installation Via pip depui...

CVE-2024-9465

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Proof of concept to exploit CVE-2024-9465 on vulnerable devices. Blog Post Root cause and indicators of compromise here: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Usage root@kitploi...

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Aviso de isenção: Este script é fornecido 'como está' e exclusivamente para fins educacionais. Os usuários são fortemente aconselhados a ter cautela e utilizá-lo dentro dos limites legais e éticos. Descrição Scanner de vulnerabilidades em Python projetado par...

CVE-2024-3400-poc

CVE-2024-3400 Vulnerability PoC Proof of Concept Vulnerability Description CVE-2024-3400 is a command injection vulnerability in Palo Alto firewall systems. By crafting a malicious HTTP request, an attacker can execute arbitrary commands on the target server and even gain root privileges...

CVE-2025-0133

CVE-2025-0133 Отражённый XSS в PAN-OS Palo Alto в шлюзе и портале GlobalProtect обработчик getconfig.esp. Параметр запроса user отражается без кодирования на страницу Captive Portal; злоумышленник, заманивший аутентифицированного пользователя GlobalProtect на специально созданную ссылку, может...

CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

cve-2024-3400-poc

cve-2024-3400-poc CVE-2024-3400에 대한 간단한 PoC, 기반 문서: https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 是 Palo Alto Networks PAN-OS 软件中的一个身份验证绕过漏洞，允许未经验证的攻击者通过网络访问管理 Web 界面来获取 PAN-OS 管理员权限，从而执行管理操作、篡改配置或利用其他经过身份验证的权限提升漏洞。 截图 ❗ 免责声明 --- 本项目主要设计为独立的 CLI 工具。将此漏洞利用程序作为服务运行可能会带来安全风险。 建议谨慎使用并采取额外的安全措施。DWYOR 用法...