CVE-2023-38035 PoC — Mobileiron MobileIron Sentry 安全漏洞

Description

CVE-2023-38035 Recon oriented exploit, extract company name contact information

介绍

# MobileIron Sentry CVE-2023-38035 information extraction

## Features

- Extract company name and contact email
- Proof of vulnerability

## Usage

```sh
./sentryexploit 192.168.0.10:8443
2023/08/24 21:29:55 Information extracted, appliance is vulnerable:
2023/08/24 21:29:55 Company: XXXX Ltd., contact: xxx@example.com
```

## Sources

- [Horizon3 deep dive](https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/)

文件快照

备注