terraguard

Informazioni sul Progetto L'obiettivo di questo progetto è semplice: creare e distruggere il proprio servizio VPN utilizzando WireGuard. Prerequisiti Terraform = 1.0.0 Ansible = 2.10.5 Come Distribuire Terraform Eseguire con sudo è necessario perché abbiamo bisogno dei permessi su localhost per...

CVE-2019-11510_poc

CVE-2019-11510 PoC Script Python per sfruttare CVE-2019-11510 e leggere il file '/etc/passwd' Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Vulnerabilità di divulgazione arbitraria di file root@kitploit: USAGE: python3 CVE-2019-11510.py...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

ivantiunlocker

ivantiunlocker Previeni CVE-2025-22457 e altri problemi di sicurezza con Juniper/Ivanti Secure Connect SSL VPN Molti problemi di sicurezza hanno riguardato i dispositivi SSL VPN di recente. Non puoi più sentirti al sicuro. E poi c'è CVE-2025-22457 ! Leggi la storia dietro :...

CVE-2024-9474

PAN-OS CVE-2024-0012 e CVE-2024-9474 Script Python generato dal post del blog : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 È tutto descritto lì Il mio commento su X : https://x.com/k4nfr3/status/1858993646923903103 esempio di rever...

CVE-2024-53704

nxbender nxbender è un proof-of-concept PoC per stabilire una connessione VPN tramite NetExtender. Questo progetto è destinato esclusivamente a scopi educativi e di ricerca. Si prega di utilizzare il codice solo in ambienti in cui si è esplicitamente autorizzati. Prerequisiti Python 3.6+...

sshuttle

sshuttle: wo transparenter Proxy auf VPN und SSH trifft Soweit ich weiß, ist sshuttle das einzige Programm, das den folgenden häufigen Anwendungsfall löst: Dein Client-Rechner oder Router läuft mit Linux, FreeBSD oder MacOS. Du hast Zugang zu einem entfernten Netzwerk über SSH. Du hast nicht...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-Concept-Scanner, der auf CVE-2024-21762 im /remote/hostcheckvalidate-Endpunkt des FortiOS SSL VPN abzielt und Reverse-Shell-Payloads liefert. Hier ist ein GitHub-ähnlicher Writeup für Ihr Projekt, einschließlich einer sauberen und prägnanten Zusammenfassung, ein...

at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Installazione root@kitploit: $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Utilizzo root@kitploit: usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help...

CVE-2019-11510

CVE-2019-11510 Exploit per la lettura arbitraria di file su Pulse Secure SSL VPN CVE-2019-11510 Puoi usare un singolo dominio oppure una lista di domini. Devi includere https:// davanti al dominio. Utilizzo : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept für privilegiertes Dateilesen über den CheckPoint SNX VPN Linux Client. Betroffene Version CheckPointVPNSNXLinux800007075.sh MD5-Prüfsumme: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit Um den Exploit auszuführen, laden Sie einfach eine beliebige Date...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Fortinet FortiOS - Cross-Site Scripting

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. id: CVE-2018-13380 info: name:...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting

Palo Alto Networks PAN-OS before 8.1.4 GlobalProtect Portal Login page allows an unauthenticated attacker to inject arbitrary JavaScript or HTML, making it vulnerable to cross-site scripting. id: CVE-2018-10141 info: name: Palo Alto Networks PAN-OS GlobalProtect 8.1.4 - Cross-Site Scripting autho...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. id: CVE-2022-35416 info: name: H3C SSL VPN =2022-07-10 - Cross-Site Scripting author: 0x240x23elu severity: medium description: | H3C SSL VPN 2022-07-10 and prior contains...

Pritunl VPN Server 1.29.2145.25 - Username Enumeration

Pritunl 1.29.2145.25 contains a username enumeration issue caused by different error responses in /auth/session login attempts, letting attackers verify valid usernames, exploit requires network access to the login endpoint. id: CVE-2020-25200 info: name: Pritunl VPN Server 1.29.2145.25 - Usernam...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. id: CVE-2017-3133 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddha severity:...