mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2025-08-05 10:01:27 +02:00
33 lines
No EOL
1.3 KiB
JSON
33 lines
No EOL
1.3 KiB
JSON
[
|
||
{
|
||
"id": 935598432,
|
||
"name": "Trickster-HTB",
|
||
"full_name": "TU-M\/Trickster-HTB",
|
||
"owner": {
|
||
"login": "TU-M",
|
||
"id": 102930183,
|
||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102930183?v=4",
|
||
"html_url": "https:\/\/github.com\/TU-M",
|
||
"user_view_type": "public"
|
||
},
|
||
"html_url": "https:\/\/github.com\/TU-M\/Trickster-HTB",
|
||
"description": "This report details exploiting Trickster via an XSS in PrestaShop (CVE-2024-34716) to gain www-data access, extracting database credentials for SSH as james. A root shell in Docker is obtained via ChangeDetection.io (CVE-2024-32651), revealing adam’s credentials, followed by root escalation with CVE-2023-47268 in PrusaSlicer.",
|
||
"fork": false,
|
||
"created_at": "2025-02-19T17:50:18Z",
|
||
"updated_at": "2025-02-25T07:26:19Z",
|
||
"pushed_at": "2025-02-19T17:54:10Z",
|
||
"stargazers_count": 0,
|
||
"watchers_count": 0,
|
||
"has_discussions": false,
|
||
"forks_count": 0,
|
||
"allow_forking": true,
|
||
"is_template": false,
|
||
"web_commit_signoff_required": false,
|
||
"topics": [],
|
||
"visibility": "public",
|
||
"forks": 0,
|
||
"watchers": 0,
|
||
"score": 0,
|
||
"subscribers_count": 1
|
||
}
|
||
] |