SMBGhost (CVE-2020-0796) Automate Exploitation and Detection
SMBv3 Ghost (CVE-2020-0796) Vulnerability
Zeek script to detect servers vulnerable to CVE-2020-13777
CVE-2020-9484 Mass Scanner, Scan a list of urls for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE
for Ubuntu 18.04, improve functions.
CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统
This is a simple test for FasterXML jackson-databind
用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞
Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484是session持久化的洞,这个是session集群同步的洞!
PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP