CVE-2023-27532

This repository contains a functional exploit for CVE-2023-27532, targeting Veeam Backup & Replication. The exploit leverages a deserialization vulnerability to either leak plaintext credentials or execute remote commands via SQL injection.

This repository contains a functional exploit for CVE-2023-27532, targeting Veeam Backup & Replication. The exploit leverages insecure deserialization to extract credentials from the Veeam server by interacting with the RemoteInvokeService.

This repository provides a mock server and a Nuclei template for detecting CVE-2023-27532, a vulnerability in Veeam Backup & Replication that allows extraction of encrypted credentials. The mock server simulates vulnerable endpoints, while the Nuclei template includes HTTP and network-based detection methods.

This repository contains a functional exploit for CVE-2023-27532, targeting Veeam Backup & Replication. The exploit leverages a WCF endpoint to execute arbitrary SQL commands, enabling remote code execution via `xp_cmdshell`.