datapower-redis-rce-exploit

datapower-redis-rce-exploit CVE-2020-5014 「Test Message」機能を悪用したIBM DataPower認証済みRedis RCEエクスプロイトのPoCです。 YouTubeで完全な解説とデモを見る tomcope.comのブログ記事 説明 DataPower WebGUIへの認証済みセッションを通じて利用可能なDataPowerの「Send a Test...

gitlab-SSRF-redis-RCE

gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLFインジェクションを利用したRedisリモートコード実行 0x00 脆弱性環境 root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef669 gitlab/gitlab-ce:11.4.7-ce.0...

Exploit for Server-Side Request Forgery in Ibm Datapower_Gateway

datapower-redis-rce-exploit CVE-2020-5014 A POC for IBM Data...

SSRFmap - Automatic SSRF Fuzzer And Exploitation Tool

SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to perform...