{"vulnerability": "CVE-2020-7200", "sightings": [{"uuid": "2c13f9f0-bb05-4254-a5e7-52d440387d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "8b6229b3-3e2e-4f53-8eee-21516e42cd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:30.000000Z"}, {"uuid": "4a754f71-c0fa-4143-a866-198971750bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb", "content": "", "creation_timestamp": "2021-03-08T22:58:04.000000Z"}, {"uuid": "502eca64-359c-4aa8-8bf0-d24189a6f93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cibsecurity/21104", "content": "\u203c CVE-2020-7200 \u203c\n\nA potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-19T02:44:20.000000Z"}, {"uuid": "f8e02ad2-c469-4678-a5e6-294e8648b90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2412", "content": "#exploit\nCVE-2020-7200:\nHPE SIM AMF Deserialization lead to RCE\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\n]-> PoC: https://github.com/testanull/ProjectSIM", "creation_timestamp": "2024-09-16T16:02:19.000000Z"}, {"uuid": "4019fdb6-9ed8-4746-8692-84a21073b402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-01T17:01:09.019921Z"}, {"uuid": "6b26ab9e-2d43-431a-8a74-beff19308f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-01T17:01:09.063414Z"}, {"uuid": "dbdc89fc-3b21-4652-9ff0-4a4140b7a175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-02T01:04:58.841904Z"}, {"uuid": "ac043dc7-2eb6-4d5e-aae4-3e78cc90e4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-02T01:04:58.888639Z"}, {"uuid": "e39609ef-b559-4fcd-87f4-e8824aea3a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x64\", \"author\": [\"Harrison Neal\", \"Jang\", \"Grant Willcox\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A remotely exploitable vulnerability exists within HPE System Insight Manager (SIM) version 7.6.x that can be\\n          leveraged by a remote unauthenticated attacker to execute code within the context of HPE System Insight\\n          Manager's hpsimsvc.exe process, which runs with administrative privileges. The vulnerability occurs due\\n          to a failure to validate data during the deserialization process when a user submits a POST request to\\n          the /simsearch/messagebroker/amfsecure page. This module exploits this vulnerability by leveraging an\\n          outdated copy of Commons Collection, namely 3.2.2, that ships with HPE SIM, to gain\\n          RCE as the administrative user running HPE SIM.\", \"disclosure_date\": \"2020-12-15\", \"fullname\": \"exploit/windows/http/hpe_sim_76_amf_deserialization\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"HPE Systems Insight Manager AMF Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/hpe_sim_76_amf_deserialization.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/hpe_sim_76_amf_deserialization\", \"references\": [\"CVE-2020-7200\", \"URL-https://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\", \"URL-https://www.zerodayinitiative.com/advisories/ZDI-20-1449/\", \"URL-https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04068en_us\"], \"rport\": 50000, \"session_types\": false, \"targets\": [\"Windows Command\", \"Windows Powershell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:51.376244Z"}, {"uuid": "820827bf-9874-44a4-a2a9-c2f640ec8c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-11T22:00:04.842086Z"}, {"uuid": "7731b208-244f-42bb-a7c3-08d7523eef4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-11T22:00:04.888180Z"}, {"uuid": "e54f0859-e173-4800-9ec9-b8a4eb7780ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1963", "content": "Deep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nExcel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\nXSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM\n\nZeroDay in RDP\nhttps://www.malwaretech.com/2020/12/how-i-found-my-first-ever-zeroday-in-rdp.html\n\nZoom Meeting Connector Post-auth Remote Root Exploit (PoC)\nhttps://packetstormsecurity.com/files/160736/zoomer.py.txt\n\nACE: Apple Type-C Port Controller Secrets\nPart 1:\nhttps://blog.t8012.dev/ace-part-1", "creation_timestamp": "2026-09-12T00:00:11.653774Z"}, {"uuid": "ca5ea723-a78c-4b94-a0a6-d192e4de3ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7200", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1968", "content": "1. Distributed malware processing framework based on Python, Redis and MinIO\nhttps://github.com/CERT-Polska/karton\n\n2. A modified version of SUNBURST with cracekd hashes, comments, annotations\nhttps://github.com/ITAYC0HEN/SUNBURST-Cracked\n\nProject-memoria-detector:\nDetect TCP/IP Stack Vulnerabilities\nhttps://github.com/Forescout/project-memoria-detector\n\n1. StreamLabs OBS macOS TCC bypass\nhttps://gist.github.com/theevilbit/50eeb4a7f333c5de44a4a6d3de41228f\n\n2. A bash script to bypass \"403 Forbidden\" responses with well-known methods\nhttps://github.com/lobuhi/byp4xx\n\n3.JavaScriptCore Internals\nPart 1 - Tracing JavaScript Source to Bytecode\nhttps://zon8.re/posts/jsc-internals-part1-tracing-js-source-to-bytecode\nPart 2 - The LLInt and Baseline JIT\nhttps://zon8.re/posts/jsc-internals-part2-the-llint-and-baseline-jit\n\n4.Windows Local Privilege Escalation from Service Account to System\nhttps://github.com/antonioCoco/RogueWinRM\n\n5.NET35/45 AD post-exploitation toolkit\nhttps://github.com/FuzzySecurity/StandIn\n\n6.Run PowerShell w rundll32. Bypass software restrictions\nhttps://github.com/p3nt4/PowerShdll\n\n7.Excel-Phish - Phish protected Excel-file passwords\nhttps://s3cur3th1ssh1t.github.io/Phish-password-protected-Excel-files\n\n8.XSS on forums.oculusvr .com leads to Oculus and Facebook account takeovers (PoC)\nhttps://ysamm.com/?p=525\n\nLinux Hardening Guide\nhttps://madaidans-insecurities.github.io/guides/linux-hardening.html\n\n\ud83d\ude42\nDeep Dive into .NET ViewState deserialization and its exploitation\nhttps://medium.com/@swapneildash/deep-dive-into-net-viewstate-deserialization-and-its-exploitation-54bf5b788817\n\nHPE System Insight Manager (SIM) AMF Deserialization lead to RCE (CVE-2020-7200)\nhttps://testbnull.medium.com/hpe-system-insight-manager-sim-amf-deserialization-lead-to-rce-cve-2020-7200-d49a9cf143c0\nPoC:\nhttps://github.com/testanull/ProjectSIM", "creation_timestamp": "2026-09-12T00:00:11.604115Z"}]}