CVE-2019-11510 PoC — Pulse Secure Pulse Connect Secure 路径遍历漏洞

Source

https://github.com/0xab01/-CVE-2019-11510-Exploit

Associated Vulnerability

Title:Pulse Secure Pulse Connect Secure 路径遍历漏洞 (CVE-2019-11510)
Description:In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

Readme

## CVE-2019-11510
Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

You can use a single domain, either a list of domains. You must include https:// in front of the domain.

Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/

If you want to just verify the exploit and download /etc/passwd then use :

cat targetlist.txt | bash CVE-2019-11510.sh --only-etc-passwd

bash CVE-2019-11510.sh -d https://vpn.target.com/ --only-etc-passwd

Output will be saved inside output/vpn.target.com/

File Snapshot


 [4.0K]  /data/pocs/40632f50a4e064643c608ea7d8f8ea5287eb2342
├── [3.4K]  CVE-2019-11510.py
└── [ 562]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!