Sploitus

Exploit for SQL Injection in Zabbix

gitee · 2022-09-14

Exploit Code

MARKDOWN18 lines
## https://sploitus.com/exploit?id=C321BD74-65BB-580D-8466-E882B67424FB
This is a comprehensive and well-structured vulnerability hub repository. Here's a concise analysis of the provided information:

**Classification:** It is an offensive tool for various vulnerability exploitation and testing purposes.

**CVE IDs:** The repository contains references to several CVE IDs, including CVE-2016-10134, CVE-2017-2824, and CVE-2020-11800.

**Target products/services:** The repository targets various products and services, including Zabbix, CouchDB, FFmpeg, Git, and Oracle Java.

**Vulnerability class/vector:** The repository contains exploits for various vulnerability classes, including RCE (Remote Code Execution), SQLi (SQL Injection), and auth bypass.

**Probable entry points:** The repository contains scripts and modules for exploiting vulnerabilities, including exploit.py, Metasploit modules, NSE (Nmap Script Engine), and Burp extensions.

**Notable dependencies/tooling:** The repository uses various dependencies and tooling, including Python, Node.js, and Docker.

**Execution context:** The repository contains scripts and workflows for building and testing Docker images, as well as for running format checks and linting.

**Preconditions:** The repository requires specific versions of dependencies and tooling, and some exploits may require specific configurations or versions of the target products or