Record · corpus.blog/posts/01a087e4-cf18-71e7-8105-5b886cc080f8

IAM Whoever I Say IAM :: Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit

srcincite.io · published 11 August 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at srcincite.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 38
Words captured: 8,121

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://en.wikipedia.org/wiki/Identity_provider_(SAML

en.wikipedia.org

https://en.wikipedia.org/wiki/Service_provider_(SAML

en.wikipedia.org

https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language

en.wikipedia.org

https://en.wikipedia.org/wiki/OAuth

en.wikipedia.org

https://github.com/pedrib/PoC/blob/master/advisories/Cisco/cisco_ise_rce.md

github.com

https://twitter.com/pedrib1337

twitter.com

https://twitter.com/disconnect3d_pl

twitter.com

https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464

portswigger.net

https://twitter.com/artsploit

twitter.com

https://twitter.com/peterjson

twitter.com

https://twitter.com/testanull

twitter.com

https://testbnull.medium.com/oracle-access-manager-pre-auth-rce-cve-2021-35587-analysis-1302a4542316

testbnull.medium.com

https://www.vmware.com/security/advisories/VMSA-2020-0027.html

vmware.com

https://media.defense.gov/2020/Dec/07/2002547071/-1/-1/0/CSA_VMWARE%20ACCESS_U_OO_195076_20.PDF

media.defense.gov

https://attackerkb.com/topics/2DKGb1v8mA/cve-2020-4006

attackerkb.com

https://twitter.com/wvuuuuuuuuuuuuu

twitter.com

https://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/

blog.assetnote.io

https://twitter.com/infosec_au

twitter.com

https://assetnote.io/

assetnote.io

https://datatracker.ietf.org/doc/html/rfc7519

datatracker.ietf.org

https://docs.vmware.com/en/VMware-Workspace-ONE-Access/21.08.0.1/rn/vmware-workspace-one-access-210801-release-notes/index.html

docs.vmware.com

https://vmware.github.io/photon/assets/files/html/3.0/Introduction.html

vmware.github.io

https://docs.spring.io/spring-framework/docs/current/javadoc-api/org/springframework/web/servlet/HandlerInterceptor.html

docs.spring.io

https://docs.spring.io/spring-security/site/docs/4.2.7.RELEASE/apidocs/org/springframework/security/web/firewall/StrictHttpFirewall.html

docs.spring.io

https://i.blackhat.com/eu-19/Thursday/eu-19-Zhang-New-Exploit-Technique-In-Java-Deserialization-Attack.pdf

i.blackhat.com

http://noahblog.360.cn/vcenter-cve-2021-2021-21985/

noahblog.360.cn

https://github.com/sourceincite/hekate/tree/main/postgres/exploit/libs/licensecheck-1.1.5.jar

github.com

https://pyn3rd.github.io/2022/06/02/Make-JDBC-Attacks-Brilliant-Again/

pyn3rd.github.io

https://twitter.com/pyn3rd

twitter.com

https://en.wikipedia.org/wiki/Hecate

en.wikipedia.org

https://github.com/sourceincite/hekate/blob/main/mysql/poc.py

github.com

https://github.com/sourceincite/hekate/blob/main/postgres/poc.py

github.com

https://github.com/sourceincite/hekate/blob/main/postgres/exploit/src/main/java/com/srcincite/exploit/Poc.java

github.com

https://conference.hitb.org/files/hitbsecconf2021sin/materials/D1T2%20-%20Make%20JDBC%20Attacks%20Brilliant%20Again%20-%20Xu%20Yuanzhen%20&%20Chen%20Hongkun.pdf

conference.hitb.org

https://github.com/sourceincite/hekate/

github.com

https://landgrey.me/blog/11/

landgrey.me

https://github.com/su18/JDBC-Attack

github.com

https://pyn3rd.github.io/2022/06/06/Make-JDBC-Attacks-Brillian-Again-I/

pyn3rd.github.io