Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-24439 PoC — Remote Code Execution (RCE)

Source
https://github.com/Makkkiiii/GitPython-Exploit-CVE-2022-24439
Associated Vulnerability
Title:Remote Code Execution (RCE) (CVE-2022-24439)
Description:All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
Description
Method I used for my Practical Pentest Module.
Readme
# GitPython-Exploit
Practical Pentest
File Snapshot

 [4.0K]  /data/pocs/8aecda4418ba37b57689278c65141af91ee14539
├── [ 338]  exploit.txt
└── [  39]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →