CVE-2020-11108 PoC — Pi-hole Gravity updater 代码问题漏洞

Source

https://github.com/Frichetten/CVE-2020-11108-PoC

Associated Vulnerability

Title:Pi-hole Gravity updater 代码问题漏洞 (CVE-2020-11108)
Description:The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. (Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges to root.) The code error is in gravity_DownloadBlocklistFromUrl in gravity.sh.

Description

PoCs for CVE-2020-11108; an RCE and priv esc in Pi-hole

Readme

# CVE-2020-11108-PoC

Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. 

For a full explanation/writeup please see <a href="http://frichetten.com/blog/cve-2020-11108-pihole-rce/#pk_campaign=github">this</a> blog post.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!