{"id":27765693,"url":"https://github.com/moften/cve-2024-51996","last_synced_at":"2025-09-03T15:39:03.645Z","repository":{"id":287966078,"uuid":"966387248","full_name":"moften/CVE-2024-51996","owner":"moften","description":"CVE-2024-51996 es una vulnerabilidad crítica que afecta al componente security-http del framework Symfony.","archived":false,"fork":false,"pushed_at":"2025-07-21T22:26:45.000Z","size":6,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-22T01:22:01.182Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moften.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-04-14T21:02:11.000Z","updated_at":"2025-07-21T22:26:48.000Z","dependencies_parsed_at":"2025-04-14T22:21:59.375Z","dependency_job_id":"2f877a28-66aa-48ce-ac7b-10ec0779850d","html_url":"https://github.com/moften/CVE-2024-51996","commit_stats":null,"previous_names":["moften/cve-2024-51996"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/moften/CVE-2024-51996","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moften%2FCVE-2024-51996","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moften%2FCVE-2024-51996/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moften%2FCVE-2024-51996/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moften%2FCVE-2024-51996/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moften","download_url":"https://codeload.github.com/moften/CVE-2024-51996/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moften%2FCVE-2024-51996/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273467347,"owners_count":25111129,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-03T02:00:09.631Z","response_time":76,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-04-29T16:56:04.110Z","updated_at":"2025-09-03T15:39:03.633Z","avatar_url":"https://github.com/moften.png","language":"Python","funding_links":["https://www.paypal.com/paypalme/moften"],"categories":[],"sub_categories":[],"readme":"# ⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit\n\nExploit para la vulnerabilidad crítica **CVE-2024-51996**, que permite el **bypass de autenticación** en aplicaciones Symfony que utilizan el mecanismo `Remember Me`.\n\n\u003e 🧠 **Impacto**: Suplantación de usuarios privilegiados (como `admin`) sin necesidad de credenciales válidas.\n\n---\n\n## 📖 Descripción\n\n**CVE-2024-51996** es una vulnerabilidad en el componente `security-http` de Symfony. El fallo radica en que **no se valida correctamente el nombre de usuario** contenido en la cookie `REMEMBERME`, lo que permite modificarlo sin invalidar el token.\n\nUn atacante con acceso a una cookie válida (por ejemplo, `User1:token:series:hash`) puede modificarla y reemplazar el identificador `User1` por cualquier otro nombre de usuario registrado, como `admin`.\n\n---\n\n## 🚀 Uso del Exploit\n\n```bash\npython3 CVE-2024-51996_Exploit.py \\\n  --url https://objetivo.com \\\n  --cookie \"User1:token:series:hash\" \\\n  --spoof admin\n```\n\n  ---\n\n\n## 🙌 Apóyame\n\nSi esta herramienta te ha sido útil o quieres apoyar futuros desarrollos, puedes invitarme un café ☕ o hacer una donación. ¡Cualquier apoyo cuenta!\n\n[![Donate with PayPal](https://img.shields.io/badge/PayPal-Donate-blue.svg)](https://www.paypal.com/paypalme/moften)\n\n---\n\n## 📬 Contacto y redes\n\n- 💌 Correo: [m10sec@proton.me](mailto:m10sec@proton.me)\n- 🌐 Blog: [https://m10.com.mx](https://m10.com.mx)\n- 🐦 Twitter: [@hack4lifemx](https://twitter.com/hack4lifemx)\n- 💼 LinkedIn: [Francisco Santibañez](https://www.linkedin.com/in/franciscosantibanez)\n- 🐙 GitHub: [github.com/m10sec](https://github.com/moften)\n\n---\n\n## 🛡️ Filosofía\n\nCreo en un mundo donde los usuarios tienen control sobre su privacidad. Esta herramienta nace desde la trinchera del pentesting real, con amor por la libertad digital y el hacking con propósito.\n\n---\n\n⭐ Si te gustó este proyecto, dale una estrella en GitHub y compártelo con tu comunidad.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoften%2Fcve-2024-51996","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmoften%2Fcve-2024-51996","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoften%2Fcve-2024-51996/lists"}