Sploitus

Exploit for CVE-2021-43798-mass_scanner

kitploit · 2026-09-03

Exploit Code

MARKDOWN91 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-RODPWN-CVE-2021-43798-MASS_SCANNER
# Grafana CVE 2021-43798

Неавторизованное чтение произвольных файлов в Grafana — уязвимость **CVE-2021-43798**

## Зависимости

root@kitploit:~
    
    
    python3 -m pip install -r requirements.txt
    
    или
    
    pipenv install -r requirements.txt
    
    

# Дорки

![shoot_shodan.png](https://assets.kitploit.com/production/public/readmes/52630/31d4159eb259d96108af8ea82aedecc5103fc4453931631926b683ef8e79246e/9f8e44e2e96fb953572930d8014f86f7047757a1b22c3d90337957a2a2d25503-display-v1.webp)

  * Дорки (Shodan | Google) 
    * Google Dorks
    * Shodan Dorks



# Использование

  * Цели без / в конце. И без http:// или https:// 
    * Пример файла targets.txt



root@kitploit:~
    
    
    target.com
    example.com
    foo.gov
    xpto.com.de
    

root@kitploit:~
    
    
    usage: tool [-h] [--file <hostnames.txt>] [--range <ip-start>,<ip-end>] [--single SINGLE]
    
    optional arguments:
      -h, --help                   show this help message and exit
      --file <hostnames.txt>       Input your target host lists
      --range <ip-start>,<ip-end>  Set range IP Eg.: 192.168.15.1,192.168.15.100
      --single <target>            Only one target
    

# PoC

![poc.gif](https://assets.kitploit.com/production/public/readmes/52630/6cd65d107c272cc2fd8f7828f265f4233aedc74db873b86ee0f40d731b5d6a9e/a6ab250aca17d17a70ed72a986120d43659163dc0e6ad1f8c6efb0ce108b0742-display-v1.webp)

## Возможности

  * Диапазон IP-адресов с помощью --range, напр.: python3 main.py --range 192.168.0.1,192.168.1.253
  * Список хостов с помощью --file, напр.: python3 main.py --file hostnames.txt
  * Проверка одной цели с помощью --single, напр.: python3 main.py --single example.com:3000



## Ссылки

https://github.com/jas502n/Grafana-CVE-2021-43798

## ОБРАТИТЕ ВНИМАНИЕ

root@kitploit:~
    
    
    +------------------------------------------------------------------------------+
    |  [!] Legal disclaimer: Usage of this tool for attacking                      |
    |  targets without prior mutual consent is illegal.                            |
    |  It is the end user's responsibility to obey all applicable                  | 
    |  local, state and federal laws.                                              |
    |  Developers assume no liability and are not responsible for any misuse or    |
    |  damage caused by this program                                               |
    +------------------------------------------------------------------------------+
    
    

Пока!

![bye-rui.gif](https://assets.kitploit.com/production/public/readmes/52630/7269d0fa2d6bb1ad4ab15275a4ca121c5e7c788610cfbb6ac8d4ebf074f6fbe6/29148adf6b5525f3aedcadb7f11cd80de8ec6c138624c374bc195774b655d03c-display-v1.webp)