
Proof-of-concept for CVE-2024-53591, demonstrating domain enumeration via brute force on Seclore's login page to identify internal services.
An issue in the login page of Seclore v3.27.5.0 allows attackers to enumerate valid domains (internal service) via a brute force attack.
https://company/policyserver/redirectTprepositoryEntryAction.do?repoCode=10006, brute force repoCode parameter to find all hosted domains & internal services