wy876

Python

The modified version of the original script can be described as a Proof of Concept (PoC) Exploit Script for CVE-2024-36991, designed to read sensitive files from a vulnerable Splunk Enterprise instance by leveraging path traversal techniques.

Python

Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.

cve-2024-36991 ethical-hacking path-traversal pentesting splunk

Python

This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories (e.g., credentials, logs, configurations).

Critical Splunk Vulnerability CVE-2024-36991: Patch Now to Prevent Arbitrary File Reads

Python

wy876 POC | wy876的poc仓库已删库，该项目为其仓库镜像

备份的漏洞库，3月开始我们来维护

漏洞文库 wiki.wy876.cn

HTML

None

Python

Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files.

Python

Path traversal vulnerability in Splunk Enterprise on Windows

CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10.

Python

Path Traversal On The "/Modules/Messaging/" Endpoint In Splunk Enterprise On Windows

cve cve-2024 path-traversal splunk cve-2024-36991

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

Python

收集最新漏洞POC（Yaml\Python）

Python