CVE-2024-13159 PoC — Ivanti EPM 安全漏洞

Source

https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities

Associated Vulnerability

Title:Ivanti EPM 安全漏洞 (CVE-2024-13159)
Description:Ivanti EPM是美国Ivanti公司的一个一站式管理用户配置文件和所有客户端设备的软件。 Ivanti EPM存在安全漏洞，该漏洞源于包含一个绝对路径遍历，允许远程未经身份验证的攻击者利用该漏洞泄露敏感信息。

Description

Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others

Readme

# Ivanti EPM Coercion Vulnerabilities
Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks.

## Blog Post
Deep-dive analysis here:
[https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/](https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/)

## Usage
```
% python3 CVE-2024-13159.py -h
usage: CVE-2024-13159.py [-h] -u URL -t TARGET

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     The base URL of the target
  -t TARGET, --target TARGET
                        The target IP to reach out to
```

## Follow the Horizon3.ai Attack Team on Twitter for the latest security research:
*  [Horizon3 Attack Team](https://twitter.com/Horizon3Attack)
*  [James Horseman](https://twitter.com/JamesHorseman2)
*  [Zach Hanley](https://twitter.com/hacks_zach)

## Disclaimer
This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where explicitly authorized. Project maintainers are not responsible or liable for misuse of the software. Use responsibly.

File Snapshot


 [4.0K]  /data/pocs/17e65be0940ff8255882e56de68a676085a6cc37
├── [1.4K]  CVE-2024-13159.py
└── [1.3K]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!