CVE-2020-28653 PoC — ZOHO ManageEngine OpManager 安全漏洞

Source

https://github.com/tuo4n8/CVE-2020-28653

Associated Vulnerability

Title:ZOHO ManageEngine OpManager 安全漏洞 (CVE-2020-28653)
Description:Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Readme

# CVE-2020-28653

- Version: 2016 - 2020 (before patch)

- Usage:
```
python exploit.py http://vuln-web.com
```

![rce.png](rce.png)

File Snapshot


 [4.0K]  /data/pocs/571ef52b806e3a295df939597540044d8b80ed72
├── [1.3K]  exploit.py
├── [4.6K]  gadget-2016.bin
├── [4.6K]  gadget-2017.bin
├── [4.6K]  gadget-2018.bin
├── [4.6K]  gadget-2019.bin
├── [4.6K]  gadget-2020.bin
├── [  10]  int.bin
├── [4.7K]  rce.png
└── [ 134]  README.md

0 directories, 9 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!