Confluence OGNL injection

Last update: Sep 23, 2022

Overview

CVE-2021-26084

Confluence OGNL injection

CVE-2021-26084 is an Object-Graph Navigation Language (OGNL) injection vulnerability in the Atlassian Confluence Webwork implementation. An unauthenticated, remote attacker could exploit this flaw by sending a specially crafted request to vulnerable endpoints on the Confluence Server or Data Center instance. Successful exploitation would allow an attacker to execute arbitrary code.

Note - make sure to change the collaborator id.

Usage

python3 CVE-2021-26084.py http://target

Authors

• D0rkerDevil

This is for educational purposes, Authors are not responsible for any damages.

Owner

Ashish Kunwar

Researcher at RISKIQ | I deal with 0days and malwares

GitHub Repository

NexScanner is a tool which allows you to scan a website and find the admin login panel and sub-domains

NexScanner NexScanner is a tool which helps you scan a website for sub-domains and also to find login pages in the website like the admin login panel

8 Sep 03, 2022

the swiss army knife in the hash field. fast, reliable and easy to use

hexxus Hexxus is a fast hash cracking tool which checks more than 30 thousand passwords in under 4 seconds and can crack the following types bcrypt sh

17 Apr 05, 2022

威胁情报播报

Threat-Broadcast 威胁情报播报运行环境项目介绍从以下公开的威胁情报来源爬取并整合最新信息： 360：https://cert.360.cn/warning 奇安信：https://ti.qianxin.com/advisory/ 红后：https://redqueen.tj-u

148 Nov 09, 2022

PwdGen is a Python Tkinter tool for generating secure 16 digit passwords.

PwdGen ( Password Generator ) is a Python Tkinter tool for generating secure 16 digit passwords. Installation Simply install requirements pip install

7 Jul 14, 2022

Discord-email-spammer-exploit - A discord email spammer exploit with python

Discord-email-spammer-exploit was made by Love ❌ code ✅ 🎈 ・Description First it

25 Aug 13, 2022

This tool was created in order to automate some basic OSINT tasks for penetration testing assingments.

This tool was created in order to automate some basic OSINT tasks for penetration testing assingments. The main feature that I haven't seen much anywhere is the downloadd google dork function where t

5 May 31, 2022

An advanced multi-threaded, multi-client python reverse shell for hacking linux systems

PwnLnX An advanced multi-threaded, multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out

212 Dec 24, 2022

A passive-recon tool that parses through found assets and interacts with the Hackerone API

Hackerone Passive Recon Tool A passive-recon tool that parses through found assets and interacts with the Hackerone API. Setup Simply run setup.sh to

4 Jan 13, 2022

👑 Discovery Header DoD Bug-Bounty

👑 Discovery Header DoD Bug-Bounty Did you know that DoD accepts server headers? 😲 (example: apache"version" , php"version") ? In this code it is pos

38 Aug 09, 2022

Finite Volume simulation of the Raleigh-Taylor Instability

finitevolume2-python Finite Volume simulation of the Raleigh-Taylor Instability Create Your Own Finite Volume Fluid Simulation (With Python): Part 2 B

12 Sep 01, 2022

IPscan - This Script is Framework To automate IP process large scope For Bug Hunting

IPscan This Script is Framework To automate IP process large scope For Bug Hunti

8 Mar 12, 2022

Malware Configuration And Payload Extraction

CAPEv2 (Python3) has now been released CAPEv2 With the imminent end-of-life for Python 2 (January 1 2020), CAPEv1 will be phased out. Please upgrade t

701 Dec 27, 2022

Python implementation for PrintNightmare using standard Impacket.

PrintNightmare Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527) using standard Impacket. Installtion $ pip3 install impacket

141 Dec 31, 2022

Security offerings for AWS Control Tower

Caylent Security Catalyst Reference Architecture Examples This repository contains solutions for Caylent's Security Catalyst. The Security Catalyst is

1 Oct 22, 2021

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

The SCodeScanner stands for Source Code Scanner, where you can scan your source code files like PHP and get identify the vulnerabilities inside it. The tool can use by Pentester, Developer to quickly

136 Dec 13, 2022

Confluence OGNL injection

Related tags

Overview

CVE-2021-26084

Note - make sure to change the collaborator id.

Usage

Authors

Owner

Ashish Kunwar

NexScanner is a tool which allows you to scan a website and find the admin login panel and sub-domains

the swiss army knife in the hash field. fast, reliable and easy to use

威胁情报播报

PwdGen is a Python Tkinter tool for generating secure 16 digit passwords.

Discord-email-spammer-exploit - A discord email spammer exploit with python

This tool was created in order to automate some basic OSINT tasks for penetration testing assingments.

An advanced multi-threaded, multi-client python reverse shell for hacking linux systems

A passive-recon tool that parses through found assets and interacts with the Hackerone API

👑 Discovery Header DoD Bug-Bounty

Finite Volume simulation of the Raleigh-Taylor Instability

IPscan - This Script is Framework To automate IP process large scope For Bug Hunting

Malware Configuration And Payload Extraction

Python implementation for PrintNightmare using standard Impacket.

Security offerings for AWS Control Tower

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

Details,PoC and patches for CVE-2021-45383 & CVE-2021-45384

Web3 Pancakeswap Sniper & honeypot detector Take Profit/StopLose bot written in python3, For ANDROID WIN MAC & LINUX

Enhancing Twin Delayed Deep Deterministic Policy Gradient with Cross-Entropy Method

Scans all drives for log4j jar files and gets their version from the manifest

CC CAMERA HACKING TOOL