CVE-2024-43468

This repository contains a functional exploit for CVE-2024-43468, an unauthenticated SQL injection vulnerability in Microsoft Configuration Manager (SCCM). The exploit leverages crafted multipart requests to execute arbitrary SQL queries on the site database, potentially leading to remote code execution via `xp_cmdshell`.

This repository contains a Go-based exploit for CVE-2024-43468, targeting unauthenticated SQL injection in Microsoft Configuration Manager (SCCM). It leverages macOS Keychain for mTLS authentication and includes proxy support for evasion.

The repository contains Python scripts designed to monitor Windows event logs for suspicious activities related to CVE-2024-38124 and CVE-2024-43468, focusing on logon events and SCCM actions. It does not include exploit code but provides detection mechanisms.