CVE-2022-22972

This PoC exploits CVE-2022-22972, an authentication bypass vulnerability in VMware Workspace ONE, vIDM, and vRealize Automation 7.6. It manipulates the Host header in an HTTP POST request to bypass authentication and obtain a valid HZN cookie.

This repository contains a Go-based proof-of-concept exploit for CVE-2022-22972, an authentication bypass vulnerability in VMware. The exploit automates the process of bypassing authentication by manipulating login form parameters and cookies.

This repository contains an IOC (Indicators of Compromise) list related to CVE-2022-22972, including IP addresses, hashes, and domains. It does not include exploit code or technical details for exploitation.

This repository contains a functional exploit tool for multiple VMware vCenter vulnerabilities, including CVE-2022-22972, CVE-2021-21972, CVE-2021-21985, CVE-2021-22005, and Log4j (CVE-2021-44228). It provides command execution, file upload, and reverse shell capabilities.