Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-3129 PoC — Facade Ignition for Laravel 授权问题漏洞

Source
https://github.com/crisprss/Laravel_CVE-2021-3129_EXP
Associated Vulnerability
Title:Facade Ignition for Laravel 授权问题漏洞 (CVE-2021-3129)
Description:Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.
Readme
# Laravel_CVE-2021-3129_EXP
参考exp: https://github.com/SNCKER/CVE-2021-3129

## 版本要求
 Laravel Iginition == 2.5.1   
 通过EXP的本地版本 Laravel 8.4.2

## 注意事项
需要将该exp放置在phpgcc目录下，否则无法调用phpgcc

## exmaple
![image](https://github.com/crisprss/Laravel_CVE-2021-3129_EXP/blob/main/images/image.png)
File Snapshot

 [4.0K]  /data/pocs/43ee45c2772031b93f8b77062411775ba09b52b1
├── [4.0K]  images
│   └── [177K]  image.png
├── [3.2K]  Laravel_CVE-2021-3129_EXP.py
└── [ 354]  README.md

1 directory, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →