Skip to content

Instantly share code, notes, and snippets.

@basraznov
basraznov / README.md
Created July 23, 2025 04:26 — forked from paatui/README.md
CVE-2020-18327

Alfresco Community Edition v5.2.0 – Reflected XSS vulnerability in Administration Console

Description

Alfresco is a collection of information management software products for Microsoft Windows and Unix-like operating systems developed by Alfresco Software Inc. using Java technology.

Reflected Cross Site Scripting (XSS) vulnerability exists in Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API, which allows a remote attacker to inject arbitrary JavaScript.

Date: 03 March 2022
Software Link: https://www.alfresco.com
Exploit Author: Chakrit Sangsakul, Pongpol Phaiaroonrut, Thanavit Chongsutakawewong
CVE: CVE-2020-18327 \

@basraznov
basraznov / kerberos_attacks_cheatsheet.md
Created January 17, 2022 06:58 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md
A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module: