Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-22911 PoC — Rocket.Chat 安全漏洞

Source
https://github.com/overgrowncarrot1/CVE-2021-22911
Associated Vulnerability
Title:Rocket.Chat 安全漏洞 (CVE-2021-22911)
Description:A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.
Readme
# CVE-2021-22911

If you have already registered a user this will only reset the admin password, and not both. Making the exploit run much faster.

python3 exploit.py -u test -a admin@rocket.thm -t http://chat.rocket.thm -i 10.10.4.24 -p 80
File Snapshot

 [4.0K]  /data/pocs/0d495c109d1cb0dd75fd6871dee4e1aed16c4689
├── [4.3K]  CVE-2021-22911.py
└── [ 241]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →