jumpserver

Eine Open-Source-PAM-Plattform Bastion-Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 Was ist JumpServer? JumpServer ist eine Open-Source-Plattform für privilegierten Zugriff Privileged Access Management, PAM, die DevOps- und IT-Teams über einen Webbrowser...

xzk8s

xzk8s Manifestos Dockerfile e Kubernetes para reproduzir o CVE-2024-3094 Construir imagem Usamos a versão debian dos utilitários xz vulneráveis como imagem base. Também precisamos aplicar patch na biblioteca. A versão com patch da biblioteca liblzma é retirada do repositório xzbot. root@kitploit:...

CVE-2018-14847

CVE-2018-14847 создание глобального прокси на основе RouterOS через CVE-2018-14847 Как использовать подготовка root@kitploit: pip3 install paramiko ipcalc optparse hashlib использование для файла с IP-адресами root@kitploit: python3 loop.py -f list.txt для одного IP-адреса root@kitploit: python3...

IoT-Home-Guard

Die erste Version des Hardware-Tools verwendet den Raspberry Pi als Entwicklungsplattform. Benutzer müssen sich über ssh auf dem Raspberry Pi anmelden, um das Software-Tool zu starten, und dann das zu testende IoT-Gerät mit dem WLAN des Raspberry Pi verbinden. Ich entwerfe eine zweite Version, de...

REALITY_SMASHER

REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "So einfach zu stoppen wie zu verstehen." Was ist das? "Reality Smasher" ist ein Exploit für vRealize, der die Sicherheitslücken ausnutzt, die in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 behoben wurden, sowi...

CVE-2023-34039

CVE-2023-34039 POC для CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Технический анализ Анализ первопричины уязвимости можно найти в моем блоге: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Краткое описание VMWare...

pentest_teamcity

Pentest TeamCity using Metasploit TL;DR: Obtain passwords fromJetBrains IDE like IntelliJ or PyCharm and use those credentials inside TeamCity Continuous Integration Server in order to get meterpreter session on server and build agents using metasploit by Kacper Szurek. JetBrains Comment This is ...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

CVE-2023-34039

CVE-2023-34039 POC per CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight RCE tramite chiave SSH statica Analisi Tecnica Un'analisi delle cause profonde della vulnerabilità è disponibile sul mio blog:...

fwbt

fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Codice Proof of Concept per l'interazione con Firewalla tramite Bluetooth Low-Energy e lo sfruttamento di CVE-2024-40892 / CVE-2024-40893 Senza alcuna configurazione, eseguirà la scansione dei Firewalla nelle...

CVE-2021-3156

exploit.py Fork da @worawit, più corto e ottimizzato. Funziona solo con sudo=1.8.23 su Centos7 Funziona sia sul server web che su macchine Linux backdoor.php backdoor php generata tramite weevely, password: "H@rmWsH4rE!". Fornisce accesso a una sessione ssh come Apache se caricata con successo su...

cve-2021-21972

cve-2021-21972 Instruções python3 python poc.py -u target -s webshell/ssh O webshell só suporta a versão vecter6.5, o ssh suporta todas as versões, este POC é apenas para Linux...

CVE-2024-22894

CVE-2024-22894 Scaricato l'ultima versione del firmware della pompa di calore wp2reg-V3.88.0-9015 di https://www.heatpump24.com/DownloadArea.php. All'interno di questo firmware c'è un file chiamato: wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Questo...

ubuntu-privesc-lab

ubuntu-privesc-lab Flusso di lavoro completo di penetration testing: brute force delle credenziali, accesso SSH ed escalation dei privilegi CVE-2021-4034 PANORAMICA Questo progetto dimostra un flusso di lavoro completo di penetration testing contro una macchina virtuale Ubuntu vulnerabile. La...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Exploração de Shell Root Remota Um Programa Simples em Python que obtém uma Shell Root Remota no Dispositivo Alvo, explorando uma Vulnerabilidade CVE-2011-2523 presente no vsFTP 2.3.4 Requisitos Linguagem Utilizada = Python3 Módulos/Pacotes utilizados: socket os pexpect paramiko getpa...

CVE-2026-44094

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44105

The CVE-2026-44105 entry describes that credentials for the local user “user-app” may be exposed in log files, potentially allowing a low-privileged local attacker with log access to authenticate via SSH as user-app. The available metrics indicate LOCAL attack vector, low user interaction, with a...

EUVD-2026-51029

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44094 Fallback to second RAUC slot with default credentials

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44094

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...