CVE-2023-35813 PoC — Sitecore 安全漏洞

Source

https://github.com/BagheeraAltered/CVE-2023-35813-PoC

Associated Vulnerability

Title:Sitecore 安全漏洞 (CVE-2023-35813)
Description:Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

Description

An exploit for the Sitecore Remote Code Execution Vulnerability

Readme

Sitecore Remote Code Execution Vulnerability

CVE: 2023-35813 (discovered by @mwulftange)
CVSS Score: 9.8
Severity: Critical 

This is the fantastic blog post from the researchers that found it:
https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/

Figure out what command you want to use, and put it in a file called command.txt
then run command.py to encode it

after it's encoded run the exploit.py script with the hostname of the target as the arg

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!