134 matches found
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd 3.2.8.1 Backdoor Command Execution UnrealIRCd 3.2.8.1 backdoor command execution exploit in Python 3 CVE-2010-2075. Description UnrealIRCd version 3.2.8.1 contains a trojan horse which allows remote attackers to execute arbitrary commands CVE-2010-2075. I referenced the Metasploit...
sunset-noontide-pentesting
Sunset: Noontide — 渗透测试 对 Sunset: Noontide 的专业渗透测试评估与 CTF 演练，这是一台来自 VulnHub 的故意存在漏洞的机器。 本项目记录了完整的渗透测试生命周期，包括侦察、服务枚举、漏洞研究、漏洞利用、初始访问、后渗透、权限提升、入侵证明、风险评估、MITRE ATT&CK 映射以及修复建议。 ⚠️ 免责声明： 本次评估是在授权的实验室环境中针对一台故意存在漏洞的机器进行的。本文档中记录的技术和命令仅适用于已获得明确授权的系统。 🎯 目标 识别目标主机 枚举暴露的服务 识别存在漏洞的软件及版本 研究适用的漏洞 利用存在漏洞的服务 获取初始...
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution
UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...
Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation
Metasploitable2：侦察与 UnrealIRCd 后门利用 免责声明 Metasploitable2 是一台故意设计为存在漏洞的虚拟机，专门为安全培训和练习而发布。本项目完全在我拥有并控制的隔离虚拟实验环境中进行，仅用于教育目的。 概述 本项目记录了对 Metasploitable2 的完整攻击链：在网络中发现主机、对其服务进行指纹识别、识别 UnrealIRCd 中的已知后门，并利用该后门获取 shell 访问权限。 目标 练习并记录标准的从侦察到利用的工作流程：找到目标、枚举其服务、识别可利用的漏洞、利用该漏洞，并确认所获得的访问权限级别。 实验环境...
metasploitable2-exploitation-metasploit
Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...
CVE-2010-2075
CVE-2010-2075 - UnrealIRCd 3.2.8.1 Backdoor Bash PoC Description Bash PoC for the backdoor introduced in the UnrealIRCd 3.2.8.1 source tarball. The compromised binary executes arbitrary commands prefixed with AB; sent to the IRC port. Usage root@kitploit: chmod +x exploit.sh ./exploit.sh Example:...
unrealircd3.2.8.1-local-exploit
Tested on Metasploitable 3 USAGE Ruby On Attacker's shell root@kitploit: nc -nlvp 1111 On victim's shell root@kitploit: ruby exploit.rb 127.0.0.1 Expected output on attacker's shell root@kitploit: listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Pytho...
OffensivePascal-CVE-2010-2075
CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...
CVE-2010-2075-UnrealIRCd-3.2.8.1
CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...
unrealircd-backdoor-pentest-report
🛡️ UnrealIRCd Backdoor Penetration Test A controlled penetration testing project focused on identifying, exploiting, and remediating the UnrealIRCd 3.2.8.1 backdoor CVE-2010-2075 in an isolated training environment. Disclaimer: This project was conducted strictly for educational and authorized...
cve-2010-2075-analysis
CVE-2010-2075 – UnrealIRCd 后门远程代码执行 概述 本仓库记录了针对 CVE-2010-2075（影响 UnrealIRCd 3.2.8.1 的后门漏洞）的分析与利用过程。 该漏洞在受控的实验室环境中复现，目标机使用 Metasploitable 2，攻击机使用 Parrot OS。目标是识别存在漏洞的服务，确认后门的存在，并演示成功利用的影响。 漏洞详情 字段| 值 ---|--- CVE ID| CVE-2010-2075 软件| UnrealIRCd 3.2.8.1 服务端口| 6667/TCP 漏洞类型| 后门远程代码执行 严重性| 高 目标平台|...
CVE-2026-90668
A flaw was found in UnrealIRCd. The webserver component does not properly limit the number of HTTP request headers. A remote attacker can exploit this vulnerability by sending an HTTP request with an excessive number of headers, leading to memory consumption and an unresponsive server. This can...
CVE-2026-90668
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...
CVE-2026-90668
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...
EUVD-2026-76937
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...
CVE-2026-90668
UnrealIRCd versions 6.0.5 through 6.2.6 contain a denial-of-service vulnerability in its webserver component. The server does not limit the number of HTTP request headers, allowing a remote unauthenticated attacker to send a single HTTP request with an unlimited number of headers, causing excessi...
PT-2026-90782
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...
Metasploit2-pentest
Metasploitable2 Penetration Test Lab Author: Lillian Jone...