CVE-2018-8097 — CVE-2018-8097 PoC | Kitploit

PoC de CVE-2018-8097

Este es un script de prueba de concepto simple en Python que demuestra el CVE-2018-8097, afectando a la librería PyEve para versiones < 0.7.5

Uso

usage: cve_2018_8097.py [-h] -u URL -c COMMAND

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target URL (where you can use the 'where' filter), e.g. http://example.com/people
  -c COMMAND, --command COMMAND
                        System command to execute (shouldn't contain quotes)

Recursos

Descargar herramienta