A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic.
-
Updated
Jul 12, 2024 - Go
#
cve-2021-43798
Here are 8 public repositories matching this topic...
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵 禅道RCE 瑞友天翼应用虚拟化系统sql注入导致RCE大华智慧园区上传,金蝶云星空漏洞等等.
cve-2021-43798 cve-2021-45232 cve-2022-23131 cve-2022-22947 cve-2022-22963 cve-2022-22965 cve-2022-22954 cve-2022-29464 cve-2022-1388 cve-2022-30525 qvd-2023-6271 cve-2023-28432 qvd-2023-8621 cve-2023-27372 cve-2023-34960 cve-2024-25600 qvd-2024-11354 cve-2024-5084 cve-2024-36401 qvd-2024-44346
-
Updated
Nov 1, 2024 - C#
vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞
security scanner poc vulnerability cve exp cnvd cve-2018-7602 cve-2020-10204 cve-2021-42013 cve-2021-22205 cve-2021-43798 cve-2021-21234 cve-2022-1388 cve-2022-26134 cve-2020-9483 cve-2021-35042 cnvd-2021-28277 cve-2021-3223 cve-2019-15642
-
Updated
Dec 4, 2023 - Python
Grafanav8.*版本任意文件读取漏洞批量检测工具：该漏洞目前为0day漏洞，未授权的攻击者利用该漏洞，能够获取服务器敏感文件。
-
Updated
Dec 23, 2021 - Python
Grafana - Directory Traversal and Arbitrary File Read
-
Updated
Oct 8, 2022 - Python
Grafana Decryptor for CVE-2021-43798
-
Updated
Jul 2, 2024 - Python
This script implements a lab automation where I exploit CVE-2021-43798 to steal user secrets and then gain privileges on a Linux system.
-
Updated
Jan 28, 2023 - Python
Improve this page
Add a description, image, and links to the cve-2021-43798 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cve-2021-43798 topic, visit your repo's landing page and select "manage topics."