CVE-2019-5475-EXP

CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】

Vulnerability Name:

Nexus Repository Manager 2.x Remote Command Execution Vulnerability

Vulnerability Description:

Nexus Repository Manager 2.X has a remote command execution vulnerability. By default, there is a deployment permission account. After successfully logging in, custom configurations via "createrepo" or "mergerepo" can be used to trigger remote command execution.

Exploitation:

Too long..., just read the article directly: https://www.jianshu.com/p/545627664888

Demo:

This script is only for authorized testing. Do not use it for illegal purposes. Please follow the rules.