Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Go-Get-RCE-CVE-2018-6574-POC — CVE-2018-6574 POC : golang 'go get' remote command execution during source code build | Kitploit
Tools/GitHubGitHub/neargle/go-get-rce-cve-2018-6574-poc
Vulnerability AnalysisCode AnalysisExploitationPayload DevelopmentBinary Exploitation
GitHubneargle/go-get-rce-cve-2018-6574-poc

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC : golang 'go get' remote command execution during source code build

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
24144 years agoReviewed by Kitploit

CVE-2018-6574 POC

LINK

  • https://nvd.nist.gov/vuln/detail/CVE-2018-6574
  • http://blog.nsfocus.net/cve-2018-6574/

RUN

root@kitploit:~
go get github.com/neargle/CVE-2018-6574-POC

DETAIL

payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.c#L10

Now it supports all platforms using CGO features. After go get on Linux, it will create a /tmp/go-rce-poc file. On macOS and Windows, it still pops up the calculator as before.

PS. Some GCC on Windows may not have --enable-plugin support, causing error: plugin support is disabled; configure with --enable-plugin. The current POC requires gcc to support --enable-plugin.

VERSION

  • before 1.8.7
  • before 1.9.4
  • before Go 1.10rc2

THX

KINGSABRI

Download Tool