Tuleap -lte 7.6.4 PHP Unserialize RCE

preview_player
Показать описание
I follow EgiX and he recently published another PHP Object Injection RCE finding for Tuelap less than or equal to version 7.6.4. I decided to turn it into a quick python exploiter script for fun....

Source: hxxps://pastee[dot]org/tgvuj
Рекомендации по теме
Комментарии
Автор

I like the PHP shell :P You should make it so all you need to do is enter the command and it inserts it in the system();

OpenWireSecurity
join shbcf.ru