adrivillab/cve-2018-6574Proof-of-concept exploit demonstrating remote command execution in Go's `go get` via crafted cflags in a malicious third-party package.
This repository holds a PoC of the CVE-2018-6574 "go get RCE", that allowed to execute commands when downloading a 3rd party package. This could be done, as the cflags allowed to set an external library. In this PoC, the external library executes a command on the constructor
