14 matches found
Awesome_shiro
Awesome-shiro CVE-2016-4437 ShiroBase64 디코딩--AES 복호화--역직렬화 환경 linux/win10 모두 가능 python2/python3 모두 가능 module 폴더에 ysoserial.jar가 있어서 프로젝트가 약간 큽니다. 양해 부탁드립니다. 로컬 실습 환경 구축 root@kitploit: docker pull medicean/vulapps:sshiro1 docker run -d -p 80:8080 medicean/vulapps:sshiro1 스크립트 사용법 1. shirocrack.py...
CVE-2016-4437
shiro-1.2.4-脆弱性ツール rememberMeの値をデコードし、対応するclassファイルをエクスポートします 使い方 xk-mt-rememberMe解码.py 実行説明：実行後、まず鍵を入力するか、Enterキーを押してデフォルトの鍵'kPH+bIxk5D2deZiIxcaaaA=='を使用します。次にリクエストパケット内のrememberMe値を入力します。解析後、エクスポートするファイル名の入力を求められ、自動的にclassが付加されます。エクスポートしない場合はそのままEnterキーを押します。 実行方法：python xk-mt-rememberMe解码.py...
CVE-2024-51996
⚠️ CVE-2024-51996 - Symfony RememberMe 인증 우회 익스플로잇 CVE-2024-51996 심각도 취약점에 대한 익스플로잇으로, Remember Me 메커니즘을 사용하는 Symfony 애플리케이션에서 인증 우회 를 허용합니다. 🧠 영향 : 유효한 자격 증명 없이 권한 있는 사용자예: admin를 사칭할 수 있습니다. 📖 설명 CVE-2024-51996 은 Symfony의 security-http 구성 요소에 있는 취약점입니다. 결함은 REMEMBERME 쿠키에 포함된 사용자 이름을 올바르게 검증하지 않...
SHIRO-721
SHIRO-721 RememberMe Padding Oracle Vulnerability RCE 0x00 개요: cookie의 rememberMe는 AES-128-CBC 모드로 암호화되어 있으며, padding oracle 공격에 취약합니다. 공격자는 유효한 RememberMe 쿠키를 Padding Oracle Attack의 접두사로 사용한 다음, 정교하게 제작된 RememberMe를 만들어 SHIRO-550과 같은 Java 역직렬화 공격을 수행할 수 있습니다. 0x01 이 문제를 재현하는 단계: 1. 웹사이트에 로그인하고...
CVE-2026-56130
"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...
CVE-2026-43828
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
CVE-2026-43828
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
Exploit for Use of Hard-coded Cryptographic Key in Apache Aurora
Awesome-shiro CVE-2016-4437 Shiro=1.2.4反序列化，爆破模块和key、代码执行、反弹shell的工具 ---- 漏洞原因 因为shiro对cookie里的rememberme字段进行了反序列化，所以如果知道了shiro的编码方式，然后将恶意命令用它的编码方式进行编码并放在http头的cookie里，在shiro对提交的cookie的rememberme字段进行反序列化时，也就执行了插入的命令，最终造成了命令执行 shiro默认使用了CookieRememberMeManager，其处理cookie的流程是：...
Authentication Bypass
scheb/two-factor-bundle is vulnerable to authentication bypass. The 2-factor authentication can be bypassed by logging in with the REMEMBERME cookie and subsequently removing the SESSIONID key...
Apache shiro 1.2.4 version of remote command execution vulnerability details-vulnerability warning-the black bar safety net
Search, I found online about apache shiro 1.2.4 version of the vulnerability consolidation report to write too simple, is perhaps the bigwigs speaking of professional, I this noob can't read the reason, specially in the local do a full show. First from the shiro official get shiro 1.2.4 of the...
rememberme cookie is not cleared when user changes password in Confluence
When a user changes their password, the seraph cookie is still valid. To avoid this, all entries for the changed user in the table remembermetoken should be removed...
rememberme cookie is not cleared when user changes password in Confluence
When a user changes their password, the seraph cookie is still valid. To avoid this, all entries for the changed user in the table remembermetoken should be removed...
