giangdurian/cve-2021-3129Python exploit script for Laravel Ignition CVE-2021-3129 RCE, using log poisoning and phar deserialization to execute commands on vulnerable web apps.
CVSS 9.8 (Critical) | Unsafe File Operations → Log Poisoning → Phar Deserialization → RCE
Laravel Ignition < 2.5.2 (Laravel < 8.4.2) is vulnerable to RCE when APP_DEBUG=true. The /_ignition/execute-solution endpoint allows arbitrary file writing via the MakeViewVariableOptionalSolution solution class. An attacker combines log poisoning + Phar deserialization (gadget chain from phpggc) to execute code on the server without requiring authentication.
Patched: Ignition 2.5.2
See REPORT.md — a full analysis covering overview, lab setup, recon, exploitation, debugging (Xdebug + VS Code), root cause analysis, and recommendations.
CVE-2021-3129/
├── REPORT.md # Báo cáo phân tích đầy đủ
├── cve_2021_3129.py # Script exploit (Python)
├── requirements.txt # Python dependencies
└── img/ # Screenshots
└── *.png # setup, recon, exploit, debug, patch
# Cài dependencies
pip install -r requirements.txt
# Exploit
python3 cve_2021_3129.py -t http://<TARGET> -c "whoami"