CVE-2019-9596 PoC — Darktrace Enterprise Immune System 跨站请求伪造漏洞

Source

https://github.com/gerwout/CVE-2019-9596-and-CVE-2019-9597

Associated Vulnerability

Title:Darktrace Enterprise Immune System 跨站请求伪造漏洞 (CVE-2019-9596)
Description:Darktrace Enterprise Immune System是英国Darktrace公司的一套具有机器学习功能的企业安全防护系统。该系统支持实时威胁检测和自主响应等。 Darktrace Enterprise Immune System 3.1之前版本中存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。

Description

Darktrace CSRF exploit

Readme

# CVE-2019-9596-and-CVE-2019-9597
Darktrace CSRF exploit 

https://www.peerlyst.com/posts/exploiting-two-zero-days-in-a-darktrace-appliance-cve-2019-9596-and-cve-2019-9597-gerwout-van-der-veen
https://seclists.org/bugtraq/2019/May/54

File Snapshot


 [4.0K]  /data/pocs/47d31078f2531bc710fbd6891e68f65fb094fe48
├── [2.5K]  poc.html
└── [ 234]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!