pprietosanchez/cve-2020-14750PoC para las vulnerabilidades CVE-2020-14750 y cve-2020-14882
PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882
To test if a system is vulnerable use:
./test-CVE-2020-14750 hostname:7001
At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not vulnerable; this will be implemented in future versions. Update: now capable of differentiating, based on the response obtained, whether the host is vulnerable or the test has failed.
For exploitation we must pass as the first parameter the host, including the port in the format "host:port" and the following parameters the command to execute, for example "ifconfig lo"
That is:
./CVE-2020-14750 hostname:7001 ifconfig lo
The payload used is not my own, I used the one published at https://github.com/jas502n/CVE-2020-14882
Pedro Prieto Sánchez twitter: @PPrietoSanchez
