filipsedivy/cve-2020-15227Python-based checker for CVE-2020-15227 that tests Nette applications for remote code execution vulnerabilities via file_put_contents and shell_exec vectors.
DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins
This tool tests for vulnerability in nette/application.
Update dependency to the latest version.
nette/application >=3.0.6nette/application >=2.4.16nette/application >=2.3.14nette/application >=2.2.10nette/nette >= 2.1.13nette/nette >= 2.0.19Add a new dependency roave/security-advisories into the project
List of tested vulnerabilities:
git clone https://github.com/filipsedivy/CVE-2020-15227
cd CVE-2020-15227
python main.py https://example.com
OR
wget https://github.com/filipsedivy/CVE-2020-15227/archive/master.zip
unzip master.zip
cd CVE-2020-15227-master
python main.py https://example.com
from CVE_2020_1522 import CVE_2020_15227
# Disable verbose
cve = CVE_2020_15227(verbose=False)
# Response True or False
result = cve.run("https://example.com")
if result is True:
print('Fuck! Confirmed vulnerability! :-( Need update composer')
else:
print('Good night! Everything is okay. :)')