Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-13933 PoC — Apache Shiro 授权问题漏洞

Source
https://github.com/0xkami/cve-2020-13933
Associated Vulnerability
Title:Apache Shiro 授权问题漏洞 (CVE-2020-13933)
Description:Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
Description
cve-2020-13933 apache shiro权限绕过漏洞
Readme
# cve-2020-13933
cve-2020-13933 apache shiro权限绕过漏洞
这个复现非常简单，先用IDEA+shiro搭环境
参考：https://www.cnblogs.com/ph4nt0mer/p/13535999.html
然后运行，访问，抓包即可
File Snapshot

 [4.0K]  /data/pocs/125b373793ded5b8ff829d32c487e53e5fed7284
├── [133K]  cve-2020-13933 apache shiro漏洞环境.zip
└── [ 212]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →