Compartilhar

CVE-2022-36804 (Bitbucket RCE 2022)

Este repositório faz parte do hgrab-framework

dork

title: "<title>Public Repositories - Bitbucket</title>"

Produtos afetados

- Bitbucket Server and Data Center 7.6 prior to 7.6.17
- Bitbucket Server and Data Center 7.17 prior to 7.17.10
- Bitbucket Server and Data Center 7.21 prior to 7.21.4
- Bitbucket Server and Data Center 8.0 prior to 8.0.3
- Bitbucket Server and Data Center 8.1 prior to 8.1.3
- Bitbucket Server and Data Center 8.2 prior to 8.2.2
- Bitbucket Server and Data Center 8.3 prior to 8.3.1

Instalação

Instale o aplicativo no servidor

user@domain:~# git clone https://github.com/sh4den/CVE-2022-36804.git
user@domain:~# cd ./CVE-2022-36804/
user@domain:~# python3 main.py <list.txt> <command>

O arquivo de lista deve conter os servidores alvo neste formato

Baixar ferramenta

<http-https>://<target>:<port>