CVE-2024-28987

CVE-2024-28987 Proof of Concept Exploit for CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Overview Extracts up to 25 most recent tickets API limitation Retrieves full details for each ticket Analyzes ticket IDs to estimate total tickets in system Organizes output in ...

Log4NetSolarWindsSNMP-

Log4NetSolarWindsSNMP- Test application for CVE-2018-1285 alert for Solarwinds DLLs...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

CVE-2019-3980

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

CVE-2021-35215

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialization RCE, requires login. PoC POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1...

BADministration

BADministration What is BADministration? BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always:...

SolarWinds Serv-U 15.3 - Directory Traversal

SolarWinds Serv-U 15.3 is susceptible to local file inclusion, which may allow an attacker access to installation and server files and also make it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id:...

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. id: CVE-2018-19386 info: nam...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U era suscettibile a una vulnerabilità di directory traversal che avrebbe consentito l'accesso in lettura a file sensibili sulla macchina host. Query Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" Riferimenti...

solarflare

solarflare Strumento di dumping delle credenziali per SolarWinds Orion Post sul blog: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Ringraziamenti a @asolino, @gentilkiwi e @skelsec per avermi aiutato a capire DPAPI...

CVE-2024-28995

SolarWinds Serv-U Verzeichnisdurchlauf-Sicherheitslücke POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analyse https://t.co/JPCd6Y4v1g Shodan-Abfragen product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U era soggetto a una vulnerabilità di directory traversal che consentiva l'accesso in lettura a file sensibili sulla macchina host. INSTALLAZIONE git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt UTILIZZO...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Script NSE di Nmap per scaricare /etc/passwd da un sistema remoto sfruttando la vulnerabilità Solarwinds CVE-2023-23333 Salva lo script in un file chiamato solar-CVE-2023-23333.nse. Per eseguire lo script, puoi usare l'opzione --script-args di Nmap per fornire il...

CVE-2024-28995

Exploit For CVE-2024-28995 On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify. Using exploit python3...

CVE-2020-10148-Solarwinds-Orion

CVE-2020-10148 Solarwinds Orion Scarica CVE-2020-10148.py wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Ricerca di Solarwinds Orion su Shodan...

SolarWinds-CVE-2021-35250

SolarWinds-CVE-2021-35250 Serv-U v.15.3.0.X CVE-2021-35250-Directory-Traversal Ciao a tutti Questa è la mia prima POC, non giudicate severamente. Dichiarazione di non responsabilità L'autore di questo repository non è responsabile per eventuali danni causati dall'uso o dall'abuso di questi exploi...