{"uuid": "ce11ce9a-aa5d-4409-a6f7-ec5903c83f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4956", "type": "seen", "source": "https://t.me/hacking_Attack/137525", "content": "CVE-2024-4956 (Sonatype Repo 3) Exploitation Pack\nhttps://www.reddit.com/r/redteamsec/comments/1db6q4f/cve20244956_sonatype_repo_3_exploitation_pack/\n\nThe vulnerability allows unauthenticated remote attackers to read system files. The repository comes included with 155 known existing OrientDB .pcl file paths which contain data from hashed Apache Shiro 1 credentials to encrypted API keys and will automate writing found files to files on disk locally for analysis. Led to the creation of another repository linked in the shared repository above called \u201cShiro1Extractor\u201d which will extract Apache Shiro 1 hashes from OrientDB .pcl files. Led to the creation of an Apache Shiro 1 Hashcat module which is again linked in the repository I shared above. The module has a tested speed on a NVIDIA RTX 3090 of 2,663,100 hashes per second, with individual computation taking 202.11ms per batch. Instructions for using the module are available in the repository shared above. By chaining the following together, you may be able to hit some serious pay dirt on your next assessment! Smash and grab while instances are still vulnerable! Blog coming soon!    submitted by    /u/meterpretersession1  (https://www.reddit.com/user/meterpretersession1) \n [link] (https://github.com/fin3ss3g0d/CVE-2024-4956)   [comments] (https://www.reddit.com/r/redteamsec/comments/1db6q4f/cve20244956_sonatype_repo_3_exploitation_pack/)", "creation_timestamp": "2026-09-02T01:00:52.047560Z"}