CVE-2021-22893 PoC — Pulse Secure Pulse Connect Secure 资源管理错误漏洞

Source

https://github.com/orangmuda/CVE-2021-22893

Associated Vulnerability

Title:Pulse Secure Pulse Connect Secure 资源管理错误漏洞 (CVE-2021-22893)
Description:Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild.

Description

Proof On Concept — Pulse Secure CVE-2021-22893

Readme

# CVE-2021-22893
Proof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893. 

## Usage
Achieves RCE on Pulse Secure VPNs

```
chmod +x exploit.sh

./exploit.sh 10.0.0.1
./exploit.sh -l <ListoFIPs>
./exploit.sh -l IPList.txt 
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!