qafdevsec/cve-2019-9081_pocPoC exploit for CVE-2019-9081 targeting Laravel deserialization RCE. Includes a pre-built vulnerable Laravel 5.7.x application and payload generator for testing and education.
Poc for CVE-2019-9081, this CVE is just a new POP chain. The project is a pre-built vulnerable Laravel 5.7.x application with an entry point for POI vulnerability at URI /deserialize (POST-request).
Starting the vulnerable application:
$ git clone https://github.com/nth347/CVE-2019-9081_poc.git
$ cd CVE-2019-9081
$ php artisan serve
Obtaining payload:
$ php CVE-2019-8091_poc.php
Sending payload to the application using a POST request to URI /deserialize, via a parameter named data.