CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

Last update: Jul 20, 2022

Overview

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

Usage

usage: cve-2021-26084_confluence_rce.py [-h] --url URL [--cmd CMD] [--shell]

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

optional arguments:
  -h, --help         show this help message and exit
  --url URL, -u URL  Target Url
  --cmd CMD, -c CMD  Command
  --shell            Get shell

python3 cve-2021-26084_confluence_rce.py -u http://target:8090 -c "whoami"

python3 cve-2021-26084_confluence_rce.py -u http://target:8090 -c "cmd.exe /c dir"

GetShsell

python3 cve-2021-26084_confluence_rce.py -u http://target:8090 --shell

Reference:

https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md

Owner

r0cky

GitHub Repository

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script

1 Dec 15, 2021

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

infosec-fortress A python script to turn Ubuntu Desktop into a strong DFIR/RE System with some teeth (Purple Team Ops)! This is intended to create a s

41 Dec 30, 2022

A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.

A simple python script to dump remote files through a local file read or local file inclusion web vulnerability. Features Dump a single file w

48 Dec 03, 2022

DomainMonitor is a web project that has a RESTful API to get a domain's subdomains and whois data.

2 Feb 05, 2022

CVE-2021-40346 integer overflow enables http smuggling

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling Reference: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021

34 Nov 15, 2022

A python module for retrieving and parsing WHOIS data

pythonwhois A WHOIS retrieval and parsing library for Python. Dependencies None! All you need is the Python standard library. Instructions The manual

384 Dec 23, 2022

Simples brute forcer de diretorios para web pentest.

🦑 dirbruter Simples brute forcer de diretorios para web pentest. ❕ Atenção Não ataque sites privados. Isto é illegal. 🖥️ Pré-requisitos Ultima versã

6 Jan 22, 2022

FIVE, Vulnerability Scanner And Mass Exploiter, made for pentesting.

$ FIVE - FIVE is a Pentesting Framework to Test the Security & Integrity of a Website, or Multiple Websites. $ Info FIVE Was Made After Vulnnr to Prod

24 Dec 10, 2021

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

arp_spoof_detector A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3 Usage: git clone ht

1 Oct 30, 2021

ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

ExProlog ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065) Usage: exprolog.py [OPTIONS] ExProlog -

130 Dec 15, 2022

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effec

2 Mar 23, 2022

Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains.

Log4jScanner Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains. Disc

35 Dec 12, 2022

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

Related tags

Overview

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

Usage

GetShsell

Reference:

Owner

r0cky

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.

DomainMonitor is a web project that has a RESTful API to get a domain's subdomains and whois data.

CVE-2021-40346 integer overflow enables http smuggling

A python module for retrieving and parsing WHOIS data

Simples brute forcer de diretorios para web pentest.

FIVE, Vulnerability Scanner And Mass Exploiter, made for pentesting.

A repository to detect the ARP spoofing in any devices and prevent Man in the Middle(MITM) attack using Python3

ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains.

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.

A simple Outline Server Access Key Copy and Paste Web Interface

xkeysnail is yet another keyboard remapping tool for X environment written in Python

Update of uncaptcha2 from 2019

Growtopia Save.dat Stealer

2021hvv漏洞汇总

A compact version of EDI-Vetter, which uses the TLS output to quickly vet transit signals.

Extensive Python3 network scanner, simplified.