mrdoulestar/cve-2019-11043CVE-2019-11043 && PHP7.x && RCE EXP
PHP 버전 7.1.x(7.1.33 미만), 7.2.x(7.2.24 미만) 및 7.3.x(7.3.11 미만)에서
PHP 7.2.20/7.3.10에서 테스트됨
1、较为稳定,只要爆破出query长度和Header头字段长度
2、auto_session检测漏洞存在性
3、实现判断目标worker进程数实现健壮性
4、全worker进程污染
location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
include fastcgi_params;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
fastcgi_pass 127.0.0.1:9000;
python cve_2019_11043.py -u http://xxxx/index.php