此仓库包含一个Python脚本，能够利用CVE-2024-5764通过静态加密密钥解密加密数据。Sonatype公告可在此处获取(https://support.sonatype.com/hc/en-us/articles/34496708991507-CVE-2024-5764-Nexus-Repository-Manager-3-Static-hard-coded-encryption-passphrase-used-by-default-2024-10-17)。
usage: cve-2024-5764.py [-h] [-e ENCRYPTED_PAYLOAD] [-p PASSPHRASE]
Decrypt data encrypted by the Java PasswordCipher class (CVE-2024-5764).
options:
-h, --help show this help message and exit
-e ENCRYPTED_PAYLOAD, --encrypted_payload ENCRYPTED_PAYLOAD
Base64 encoded encrypted payload.
-p PASSPHRASE, --passphrase PASSPHRASE
Passphrase used to decrypt the payload.
本程序仅用于合法且授权的目的。作者对此项目的任何滥用不承担任何责任或义务。