CVE-2018-15133 PoC — Laravel Framework 安全漏洞

Source

https://github.com/AlienX2001/better-poc-for-CVE-2018-15133

Associated Vulnerability

Title:Laravel Framework 安全漏洞 (CVE-2018-15133)
Description:In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack.

Description

An automated PoC for CVE 2018-15133

Readme

# Better PoC for CVE-2018-15133
An automated PoC for CVE 2018-15133

## All credits goes to kozmic who made the original PoC of CVE 2018-15133
## This is just an automation script i made while doing some lab box having this vulnerability because i didnt want to make a new deserialized object with phpggc everytime i wanted to run a different command

### Requirements:-
1. Just clone the repo
2. Install phpggc via your apt repository or any other repository your machine has
3. The script will prompt you the necessary stuff

ENJOY :)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!