Skip to content
KitploitKITPLOIT
๋„๊ตฌ์ต์Šคํ”Œ๋กœ์ž‡๋ธ”๋กœ๊ทธ
Log in
์ œ์ถœ
๋„๊ตฌ์ต์Šคํ”Œ๋กœ์ž‡๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/wuhan005/cve-2022-30781
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access Tool
GitHubwuhan005/cve-2022-30781

CVE-2022-30781

๐Ÿต Gitea ์ €์žฅ์†Œ ๋งˆ์ด๊ทธ๋ ˆ์ด์…˜ ์›๊ฒฉ ๋ช…๋ น ์‹คํ–‰ ์ต์Šคํ”Œ๋กœ์ž‡.

์ €์žฅ์†Œ ๋ณด๊ธฐ
851554๋…„ ์ „Kitploit ๊ฒ€ํ†  ์™„๋ฃŒ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 

๐Ÿต CVE-2022-30781

Gitea ์ €์žฅ์†Œ ๋งˆ์ด๊ทธ๋ ˆ์ด์…˜ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ ์ต์Šคํ”Œ๋กœ์ž‡.

์‚ฌ์šฉ ๋ฐฉ๋ฒ•

  1. ์ด ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์˜ ํŒŒ์ผ๋กœ HTTP ํŒŒ์ผ ์‹œ์Šคํ…œ ์„œ๋ฒ„๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค.
  2. api/v1/repos/e99/exp/pulls/1/index.html L96์—์„œ ์‹คํ–‰ํ•  ๋ช…๋ น์„ ํŽธ์ง‘ํ•ฉ๋‹ˆ๋‹ค.
  3. Gitea ์ธ์Šคํ„ด์Šค์—์„œ URL http://<your_host>/e99/exp๋กœ ์›๊ฒฉ ์ €์žฅ์†Œ๋ฅผ ๋งˆ์ด๊ทธ๋ ˆ์ด์…˜ํ•ฉ๋‹ˆ๋‹ค.
  4. Pwnned!

์ฐธ๊ณ 

https://tttang.com/archive/1607/ (์ค‘๊ตญ์–ด)

ํฌ๋ ˆ๋”ง

@wuhan005 @Li4n0 Vidar-Team ์ถœ์‹ 

์ด ๋ฆฌํฌ์ง€ํ† ๋ฆฌ๋Š” ๋ณด์•ˆ ์—ฐ๊ตฌ/๊ต์œก ๋ชฉ์ ์œผ๋กœ๋งŒ ์ œ๊ณต๋˜๋ฉฐ, ์‚ฌ์šฉ์— ๋”ฐ๋ฅธ ์ฑ…์ž„์€ ๋ณธ์ธ์—๊ฒŒ ์žˆ์Šต๋‹ˆ๋‹ค!

๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ