lucaskatashi/paint2die가장 간단하고 가장 신뢰할 수 있는 RichFaces Paint2DResource CVE-2018-12533 RF-14310 익스플로잇 PoC
설치 • 사용법 • Paint2Die 실행
git clone https://github.com/LucasKatashi/paint2die.git
cd paint2die
chmod +x paint2die.py
pip install -r requirements.txt
./paint2die -h
이 명령은 도구의 도움말을 표시합니다. 지원하는 모든 스위치는 다음과 같습니다.
Usage:
./paint2die [flags]
_____ _ _ ___ ____ _
| _ |___|_|___| |_|_ | \|_|___
| __| .'| | | _| _| | | | -_|
|__| |__,|_|_|_|_| |___|____/|_|___|
by: Lucas Katashi
usage: paint2die.py [-h] -t TARGET [-c COMMAND] [-r REVERSE] [-s]
paint2die.py: error: the following arguments are required: -t/--target
RichFaces CVE-2018-12533 RF-14310 exploit
options:
-h, --help show this help message and exit
-t, --target TARGET URL of RichFaces application, i.e:
http://example.com/app/a4j/g/3_3_3.Final
-c, --command COMMAND
Command to execute
-r, --reverse REVERSE
IP:PORT for reverse shell
-s, --silence Silence output