Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-3129 — Laravel debug rce | Kitploit
Tools/GitHubGitHub/sncker/cve-2021-3129
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHubsncker/cve-2021-3129

CVE-2021-3129

Laravel debug rce

View Repository
135505 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-3129

Laravel debug rce

Usage

Execute docker-compse up -d to start the environment.

Access port 8888 and click generate key on the homepage to reproduce.

A few points about the docker environment:

  • Copied .env.example to .env to enable debug environment
  • Disabled phar.readonly in php.ini
  • Added a hello template in resources/view/ with an undefined variable, and added a route in routes/web.php (this was added in the source code, not in the Dockerfile)

Reproduction Effect

Reproduction Effect

Script released. Script should be in the same directory level as the phpggc project folder.
Not very universal (at least works on my own environment). You can add other RCE chains from phpggc to improve universal killing capability.

References

https://www.ambionics.io/blog/laravel-debug-rce
https://xz.aliyun.com/t/9030#toc-3
https://blog.csdn.net/csdn_Pade/article/details/112974809

Download Tool