Modified or created exploits for assessments. Contribute to Turbul3nce/Exploits development by creating an account on GitHub.

CVE-2024-23897 | Jenkins <= 2.441 & <= LTS 2.426.2 PoC and scanner. - GitHub - xaitax/CVE-2024-23897: CVE-2024-23897 | Jenkins <= 2.441 & <= LTS 2.426.2 PoC and scanner.

Snowpark container services container with a webshell - sfc-gh-vtimofeenko/spcs-ttyd

Scanner for CVE-2024-23897 - Jenkins. Contribute to yoryio/CVE-2024-23897 development by creating an account on GitHub.

GUI_TOOLS_Py7h0n_Win：一个自用及时迭代更新的win集成化武器库，快速融合基本渗透测试中的常用工具。节省环境配置时间，快速开箱使用。 - ICML8/GUI_TOOLS_Py7h0n_Win

Repo for SSRF & Path traversal & RCE exploit dreamhack wargame. - Grantzile/exploit

CVE-2024-23897 jenkins-cli. Contribute to CKevens/CVE-2024-23897 development by creating an account on GitHub.

on this git you can find all information on the CVE-2024-23897 - 10T4/PoC-Fix-jenkins-rce_CVE-2024-23897

CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated) - Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

CVE-2024-23897 - Jenkins 任意文件读取 利用工具. Contribute to wjlin0/CVE-2024-23897 development by creating an account on GitHub.

This repository presents a proof-of-concept of CVE-2024-23897 - Vozec/CVE-2024-23897

该工具专为运维和安全检查和学生研究设计，类似于软件商城，可以实现工具下载、更新，并提供自动化安装脚本。对于信息安全专业的学生而言，不用担心工具无法正常运行配置，提升学生学习效率。 - CuriousLearnerDev/Online_tools

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with th...

Work from 2018 on Remote Code Execution in Pokemon Crystal. The RCE itself works, but the project built around it was never completed. - GitHub - MrCheeze/pokecrystal-ace: Work from 2018 on Remote ...

WEB API MARCELINUS. Contribute to marcelinusss/m4rcell development by creating an account on GitHub.

Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE - viszsec/CVE-2024-23897

1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057、S2-061、S2相关log4j2十余种漏洞。 2、“批量验证”，（为防止批量geshell，此功能已经删除，并不再...

Elevate process privileges to the System or Trustedinstaller,将进程权限提升到 System 或 Trustedinstaller - coldpon/elevationTool