CVE-2019-13024

A tool that will allow the brute forcing of the Centreon 19.04 administration panel, and then also allow for RCE after credentials have been obtained.

Centron 1904 Brute Force and RCE - CVE-2019-13024 Due to improper control of failed logins it is possible to attempt to brute force the administration panel of Centreon 1904, and then make use of unsanitized variable control to execute remote commands on the targets server This version of the exploit includes the brute force mode, to attempt to get credentials, then a choice

My write up for the recently retired HackTheBox machine: Wall!

HackTheBox: Wall My write up for the recently retired HackTheBox machine: Wall! Wall was a fairly easy machine, although a little frustrating The machine had a web application vulnerable to RCE, however it was (semi) protected by a WAF Root access involved a vulnerable SUID bit In the beginning As usual, I run nMap: PORT STATE SERVICE VERSION 22/tcp open ssh OpenSS

The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v1904 Remote Code Execution CVE-2019-13024

Centreon v.19.04 Remote Code Execution exploit (CVE-2019-13024)

Centreon-RCE Centreon v1904 Remote Code Execution exploit (CVE-2019-13024) Revision of githubcom/mhaskar/CVE-2019-13024 HOW TO USE: Edit argument defaults for convenience, or don't (bottom of script) If needed, edit 'edit_command' function to defeat defenses '-v' for troubleshooting/verbose output (prints response content) EXAMPLES: /centr