CVE-2019-11510_poc

CVE-2019-11510 PoC Python-Skript zur Ausnutzung von CVE-2019-11510 und zum Lesen der Datei '/etc/passwd' Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure Sicherheitslücke root@kitploit: USAGE: python3 CVE-2019-11510.py...

ivantiunlocker

ivantiunlocker Previna CVE-2025-22457 e outros problemas de segurança com o Juniper/Ivanti Secure Connect SSL VPN Muitos problemas de segurança em dispositivos SSL VPN recentemente. Você não pode mais se sentir seguro. E então existe o CVE-2025-22457 ! Leia a história por trás disso:...

CVE-2024-9474

PAN-OS CVE-2024-0012 و CVE-2024-9474 نص بايثون مستخرج من منشور المدونة: https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 كل شيء موصوف هناك تعليقي على X: https://x.com/k4nfr3/status/1858993646923903103 مثال لـ reverse shell...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-Concept-Scanner, der auf CVE-2024-21762 im /remote/hostcheckvalidate-Endpunkt des FortiOS SSL VPN abzielt und Reverse-Shell-Payloads liefert. Hier ist ein GitHub-ähnlicher Writeup für Ihr Projekt, einschließlich einer sauberen und prägnanten Zusammenfassung, ein...

at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Instalação root@kitploit: $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Uso root@kitploit: usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help show th...

CVE-2019-11510

CVE-2019-11510 Exploit para leitura arbitrária de arquivos no Pulse Secure SSL VPN CVE-2019-11510 Você pode usar um único domínio ou uma lista de domínios. Você deve incluir https:// na frente do domínio. Uso : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d...

Fortinet FortiOS - Cross-Site Scripting

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. id: CVE-2018-13380 info: name:...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. id: CVE-2017-3133 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddha severity:...

pulsexploit

pulsexploit Script automatizzato per l'exploit di Pulse Secure SSL VPN CVE-2019-11510 utilizzando host recuperati dall'API di Shodan. Devi avere un account Shodan per usare questo script. Clicca qui se non hai un account Shodan. Installazione 1. Installa le dipendenze. root@kitploit: CentOS &...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN – Dateilese-Schwachstelle vor der Authentifizierung Referenzen 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

CVE-2024-0012-POC

Dies ist ein echter POC, inspiriert von https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Verwendung wie - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify wenn SSL nicht funktioniert oder abgelaufen...

CVE-2019-11510-1

CVE-2019-11510-1 Exploit per la lettura arbitraria di file su Pulse Secure SSL VPN CVE-2019-11510 Utilizzo in Python: python CVE-2019-11510.py https://x.x.x.x Riferimenti: https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ Una vulnerabilità di autorizzazione impropria in Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.0 a 5.6.8 e 5.4.1 a 5.4.10 nel portale web SSL VPN consente a un attaccante non autenticato ...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit, as used by Phineas Fisher to hack Cayman Trust Bank and Hacking Team. Unauthenticated, gives you a "nobody" shell. Getting root is an exercise for the user. For details see: https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/...

VisualDoor

VisualDoor SonicWall SSL-VPN Exploit, wie von Phineas Fisher verwendet, um die Cayman Trust Bank und Hacking Team zu hacken. Unauthentifiziert, gibt dir eine "nobody"-Shell. Root zu bekommen ist eine Übung für den Benutzer. Für Details siehe:...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Strumento di sfruttamento, Puoi usare questo strumento per verificare la vulnerabilità nel tuo FortiGate SSL-VPN. Questa vulnerabilità interessa le seguenti versioni: • FortiOS 6.0 - 6.0.0 fino a 6.0.4 • FortiOS 5.6 - 5.6.3 fino a 5.6.7 • FortiOS 5.4 - 5.4.6...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Iniezione di comandi invia questa richiesta HTTP: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...

NachoVPN

NachoVPN 🌮🔒 NachoVPN è una Proof of Concept che dimostra lo sfruttamento dei client SSL-VPN, utilizzando un server VPN rogue. Utilizza un'architettura basata su plugin, così che il supporto per prodotti SSL-VPN aggiuntivi possa essere contribuito dalla community. Attualmente supporta vari popolar...