CVE-2021-38647

CVE-2021-38647 이것은 CVE-2021-38647에 대한 POC입니다 : /wsman에 POST 요청을 보내고 payload.xml의 내용을 사용하여 원하는 명령어만 변경하십시오, POC로서, id 명령어만 실행됩니다. 출처: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure 마음에 드신다면 팔로우하세요 : https://twitter.com/silentgh00st...

WSMan-WinRM

WSMan-WinRM Una raccolta di codice sorgente proof-of-concept e script per eseguire comandi remoti su WinRM utilizzando l'oggetto COM WSMan.Automation. Contesto Per informazioni di base, consultare il seguente post del blog: WS-Management COM: Another Approach for WinRM Lateral Movement Note...

ProxyShell

ProxyShell Installazione root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilizzo root@kitploit: python3 exploit.py...

EUVD-2013-3554

Malware in sbrugna...

Exploit for CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a PO...

WSMan-WinRM - A Collection Of Proof-Of-Concept Source Code And Scripts For Executing Remote Commands Over WinRM Using The WSMan.Automation COM Object

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface IPMI with firmware for Supermicro X9 generation motherboards before 3.15 SMTX9315 and firmware for Supermicro X8 generation motherboards before SMT X8 312...

CVE-2013-3620

Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) firmware affect Supermicro X9 generation motherboards (before 3.15, SMT_X9_315) and Supermicro X8 generation motherboards (before SMT X8 312). Root cause: credentials stored in firmware expose remote management access...

Intel Active Management Technology - System Privileges

!/usr/bin/python -- coding: utf-8 -- Author: Nixawk CVE-2017-5689 = dork="Server: IntelR Active Management Technology" port:"16992", ports= 623, 664, 16992, 16993, 16994, 16995 products= Active Management Technology AMT, Intel Standard Manageability ISM, Intel Small Business Technology SBT versio...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openSUSE operating system’s openwsman-devel package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...