Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-23935 PoC — exiftool 操作系统命令注入漏洞

Source
https://github.com/0xFTW/CVE-2022-23935
Associated Vulnerability
Title:exiftool 操作系统命令注入漏洞 (CVE-2022-23935)
Description:lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
Description
CVE-2022-23935 exploit PoC exiftool version 12.37 written in python
Readme
## Introduction

CVE-2022-23935 exploit PoC exiftool version 12.37 

## Installation

```bash

git clone https://github.com/0xFTW/CVE-2022-23935

cd CVE-2022-23935 

chmod +x CVE-2022-23935.py

pip3 install pwntools

```

## Usage

```bash

./CVE-2022-23935 <IP> <PORT>

```
File Snapshot

 [4.0K]  /data/pocs/ec48ff032accfa9fb8d22b7af83e4045b52f86f2
├── [2.0K]  CVE-2022-23935.py
└── [ 274]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →