目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CVE-2023-6710 PoC — Apache httpd 跨站脚本漏洞

来源
关联漏洞
标题: Apache httpd 跨站脚本漏洞 (CVE-2023-6710)
Description:Apache httpd是美国阿帕奇(Apache)基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。 Apache httpd 存在跨站脚本漏洞,该漏洞源于mod_proxy_cluster 中发现了一个缺陷,允许恶意用户在 URL 的alias参数中添加脚本,以触发跨站脚本。
Description
Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.
介绍
# CVE-2023-6710 Exploit POC
Explore the depths of CVE-2023-6710 with metasploit and our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

# Installation
- git clone https://github.com/DedSec-47/Metasploit-Exploits-CVE-2023-6710.git 
- cd Metasploit-Exploits-CVE-2023-6710
- sudo mv mod_cluster_xss.rb /usr/share/metasploit-framework/modules/auxiliary/scanner/mod_cluster_stored_xss.rb


# Usage
- use auxiliary/scanner/mod_cluster_stored_xss
- set rhosts https://www.example.com
- set targeturi /cluster-manager
- set rport 443
- set ssl true
- exploit

# Disclaimer
This script is provided solely for educational and research purposes. Please use it responsibly and only on systems for which you have explicit permission to test. Unauthorized or malicious use of this script could lead to legal consequences and ethical concerns. Ensure that you adhere to ethical guidelines and respect the privacy and security of others.



文件快照

登录后查看神龙缓存的 POC 文件快照

登录查看
备注
    1. 建议优先通过来源进行访问。
    2. 本地 POC 快照面向订阅用户开放;当原始来源失效或无法访问时,本地镜像作为订阅权益的一部分提供。
    3. 持续抓取、验证、维护这份 POC 档案需要不少投入,因此本地快照已纳入付费订阅。您的订阅是让这份资料能继续走下去的关键,由衷感谢。 查看订阅方案 →