m3m0o / metabase-pre-auth-rce-poc
This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646.
☆29Updated 10 months ago
Alternatives and similar repositories for metabase-pre-auth-rce-poc
Users that are interested in metabase-pre-auth-rce-poc are comparing it to the libraries listed below
Sorting:
- Joomla! < 4.2.8 - Unauthenticated information disclosure☆86Updated last year
- A webshell plugin and interactive shell for pentesting a Joomla website.☆52Updated 2 years ago
- CVE-2023-2255 Libre Office☆58Updated last year
- Openfire Console Authentication Bypass Vulnerability with RCE plugin☆51Updated last year
- ☆41Updated 7 months ago
- This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.☆73Updated last year
- PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22☆30Updated 2 years ago
- GameOver(lay) Ubuntu Privilege Escalation☆124Updated last year
- POC for CVE-2021-41091☆65Updated last year
- Script to retrieve the master password of a keepass database <= 2.53.1☆100Updated last year
- CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit☆72Updated 8 months ago
- Reverse Shell POC exploit for Dolibarr <= 17.0.0 (CVE-2023-30253), PHP Code Injection☆39Updated 11 months ago
- KeePass 2.X dumper (CVE-2023-32784)☆19Updated last year
- JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit☆44Updated 11 months ago
- generate payloads that force authentication against an attacker machine☆106Updated 2 years ago
- Ghostscript command injection vulnerability PoC (CVE-2023-36664)☆124Updated last year
- Reverse Shell Exploit for Searchor <= 2.4.2 (2.4.0)☆17Updated last year
- Proof of Concept Exploit for PaperCut CVE-2023-27350☆51Updated 2 years ago
- SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions…☆64Updated 7 months ago
- Vulnerabilities Exploitation On Ubuntu 22.04☆41Updated 2 years ago
- POC for CVE-2024-23897 Jenkins File-Read☆26Updated 3 months ago
- Precompiled executable☆53Updated 2 months ago
- A tool for mapping cypher databases☆16Updated 2 years ago
- ☆58Updated last year
- Metabase Pre-auth RCE☆12Updated last year
- Collection of username lists for enumerating kerberos domain users☆91Updated 7 years ago
- ☆60Updated 2 months ago
- Bad scripts I made doing CTF's☆21Updated last year
- Python exploit code for CVE-2021-4034 (pwnkit)☆166Updated 3 years ago
- Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments☆146Updated 2 months ago