what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Marcin Wolak

SimpleRmiDiscoverer 0.1

Posted Jan 5, 2023

Authored by Marcin Wolak | Site github.com

SimpleRmiDiscoverer is a JMX RMI scanning tool for unsecured (without enabled authentication) instances of JAVA JMX. It does not use standard Java RMI/JMX classes like other available tools but rather communicates directly over TCP. The tool is written in Java and is very useful in red teaming operations because JVM is still ubiquitous in corporate environments. It can be executed by unprivileged (non-admin) users.

tags | tool, java, scanner, tcp

systems | unix

SHA-256 | 93daab8314c5a134f408dc5214f71dbb47eac17e499aa7e761104430bd8a7f8f

Download | Favorite | View

Pega Platform 8.7.3 Remote Code Execution

Posted Oct 24, 2022

Authored by Marcin Wolak

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the underlying system. This does not affect systems running on PegaCloud due to its design and architecture.

tags | exploit, remote, code execution

advisories | CVE-2022-24082

SHA-256 | 14f97e39b3b48a9075da1f6e66862a187e036b509ff25bfce33fb66bb645c604

Download | Favorite | View

rpcexp.c

Posted Apr 2, 2003

Authored by Marcin Wolak

Microsoft Windows RPC Locator Service remote exploit. Binds cmd.exe to port 5151. Tested again Windows 2000 SP3 and Windows NT 4 SP6a.

tags | exploit, remote

systems | windows

advisories | CVE-2003-0003

SHA-256 | 654f116fb6620b674164863b06d4a070270b438112d36c49f7ee83e5dbc6bbf2

Download | Favorite | View