CVE-2024-36991

CVE-2024-36991 POC for CVE-2024-36991: سيحاول هذا الاستغلال قراءة ملف /etc/passwd الخاص بـ Splunk. نظرة عامة هذه أداة فحص واستغلال جماعي لـ CVE-2024-36991: اجتياز المسار الذي يؤثر على Splunk Enterprise على إصدارات Windows الأقل من 9.2.2 و9.1.5 و9.0.10. تم اكتشاف هذه الثغرة بواسطة Danylo Dmytriiev...

Splunk-RCE-poc

Splunk RCE - PoC استغلال إثبات المفهوم لـ CVE-2023-46214، SVD-2023-1104 الاستخدام عنوان URL لمثيل Splunk واسم المستخدم وكلمة المرور وعنوان IP للقشرة العكسية والمنفذ كلها مطلوبة كمعاملات لسطر الأوامر. على سبيل المثال: root@kitploit: $ python3 CVE-2023-46214.py --url --username --password --ip --po...

crowdstrike-falcon-queries

crowdstrike-falcon-queries مجموعة من لغة معالجة البحث في Splunk SPL لاصطياد التهديدات باستخدام CrowdStrike Falcon تم التطوير والصيانة بواسطة فريق Intelligent Response من i-secure co., Ltd. crowdstrike-falcon-queries تنفيذ الملفات القابلة للتنفيذ المعاد تسميتها قائمة بالملفات الثنائية للعيش على...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

OSweep

OSweep™ OSINT को सिर्फ खोजें नहीं। इसे स्वीप करें। विवरण यदि आप IT सुरक्षा में काम करते हैं, तो आप संभवतः OSINT का उपयोग यह समझने के लिए करते हैं कि आपके SIEM ने आपको किस बारे में सतर्क किया और बाकी दुनिया इसके बारे में क्या जानती है। सबसे अधिक संभावना है कि आप एक से अधिक OSINT सेवाओं का उपयोग कर...

ThreatHunting

ThreatHunting | Un'app Splunk mappata su MITRE ATT&CK per guidare le tue cacce alle minacce Questa è un'applicazione Splunk che contiene diverse dashboard e oltre 130 report che faciliteranno gli indicatori di caccia iniziali da investigare. Ovviamente è necessario inserire dati Sysmon in Splunk;...

printnightmare-detection-lab

PrintNightmare Bedrohungserkennungs- & Incident-Response-Labor CVE-2021-34527 📌 Überblick Dieses Projekt dokumentiert eine End-to-End-Implementierung von Sicherheitsüberwachung, Detection Engineering und Incident Response, die auf PrintNightmare CVE-2021-34527 abzielt. PrintNightmare ist eine...

CVE-2026-20253

Splunk Enterprise — Laboratorio di formazione su CVE-2026-20253 Splunk Enterprise 10.2.3 · sidecar di recovery PostgreSQL · CWE-306 Autenticazione mancante per funzione critica Una riproduzione autorizzata e autonoma che modella il reale advisory per scopi di formazione difensiva. Non include il...

CVE-2024-36991

CVE-2024-36991 - Splunk Pfad-Traversal Proof of Concept PoC für CVE-2024-36991, das es einem Angreifer ermöglicht, beliebige Dateien in Splunk für Versionen unter 9.2.2, 9.1.5 und 9.0.10 für Windows zu lesen. Verwendung Splunk-Konfigurationsdateien lesen Um Splunk-Dateien zu lesen, führen Sie...

CVE-2024-36991

CVE-2024-36991 Path Traversal sull'endpoint “/Modules/Messaging/” in Splunk Enterprise su Windows Nelle versioni di Splunk Enterprise precedenti a 9.2.2, 9.1.5 e 9.0.10, un attaccante potrebbe eseguire un path traversal sull'endpoint /modules/messaging/ in Splunk Enterprise su Windows. La...

CVE-2024-36991

Splunk Pfadüberschreitungs-Exploit CVE-2024-36991 Beschreibung Dies ist ein Proof-of-Concept PoC Exploit-Skript für CVE-2024-36991 , eine Schwachstelle zur Pfadüberschreitung, die Splunk Enterprise unter Windows in den folgenden Versionen betrifft: 9.2.2 9.1.5 9.0.10 Die Schwachstelle ermöglicht ...

CVE-2024-36985

CVE-2024-36985 Alle Exploit-Codes wurden von Gemini generiert. Splunk-Administratorrolle erforderlich. Splunkarchiver-Anwendung aktiviert. Sie können auch den folgenden SPL in der Suche ausführen, um die RCE auszulösen. root@kitploit: | copybuckets data=""providers": "pwnprovider":...

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Setup di esempio: root@kitploit: git clone...

struts-splunk

struts-splunk Vulnerabilità Apache Struts con splunk...

Splunk Enterprise - Local File Inclusion

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows. id: CVE-2024-36991 info: name: Splunk...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 RCE pre-autenticazione Splunk Strumento generatore di artefatti di rilevamento per 1day RCE pre-autenticazione Splunk Rilevamento in azione Il generatore di artefatti di rilevamento tenta di accedere all'endpoint /v1/postgres/recovery/backup del servizio PostgreSQL Sidecar per...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

CVE-2024-36991

CVE-2024-36991: Pfad-Navigation Path Traversal, die Splunk Enterprise auf Windows-Versionen unter 9.2.2, 9.1.5 und 9.0.10 betrifft. CVEHunter-Werkzeug zur Erkennung und Ausnutzung von Verwundbarkeiten für CVE-2024-36991 mit asynchroner Leistung. Installation root@kitploit: git clone...

Cybersecurity-Capstone-Project

Cybersecurity-Capstone-Project Panoramica Questo repository contiene il mio progetto Capstone di cybersecurity, completato nell'ambito della NCSC Nashama CyberCamp 11 e realizzato in collaborazione con IT Security C &T. Il progetto dimostra un workflow completo di valutazione delle vulnerabilità...

CVE-2024-36991

CVE-2024-36991 Template Nuclei Descrizione Questa repository contiene un template Nuclei per rilevare la vulnerabilità di path traversal in Splunk Enterprise su versioni Windows precedenti alle versioni 9.2.2, 9.1.5 e 9.0.10. La vulnerabilità consente l'accesso non autorizzato a file sensibili,...