Catálogo de exploits

Implementation of CVE-2022-26134

Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection

Server to host/activate Follina payloads & generator of malicious Word documents exploiting the MS-MSDT protocol. (CVE-2022-30190)

This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective

Simple Honeypot for Atlassian Confluence (CVE-2022-26134)

Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

Exploit in Rails Development Mode. With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.

Vulnmachines/Confluence-CVE-2022-26134

Atlassian confluence poc

tej7gandhi/CVE-2022-30190-Zero-Click-Zero-Day-in-msdt

ItsNee/Follina-CVE-2022-30190-POC

abhishekmorla/CVE-2022-26134

0xAgun/CVE-2022-26134

CVE-2021-3129 POC

CVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 (Dirty Pipe) 实现容器逃逸

Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC

Dump SQL database version on host running Casdoor < 1.13.1

Wordpress Plugin WP User Frontend < 3.5.26 - SQL-Injection (Authenticated)

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.

CVE-2022-26133 Exploit

（CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server

CVE-2022-29464 PoC for WSO2 products

[CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass.

Remote Access Shell for Windows (based on cve-2022-30190)

This project demonstrates a proof-of-concept exploit for CVE-2022-30190, also known as "Follina"—a critical remote code execution vulnerability affecting Microsoft Office via the MSDT protocol. The application generates malicious Office documents to illustrate the exploit workflow for educational and research purposes only.

CVE-2022-1388

kyxiaxiang/CVE-2022-26134

Information and scripts for the confluence CVE-2022-26134

CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection