项目介绍

convisolabs/CVE-2021-22204-exiftool 是一个托管在 GitHub 上的开源项目,主要使用 Perl 编写,目前获得 98 个 Star、27 次 Fork。

仓库全名
convisolabs/CVE-2021-22204-exiftool
Star 数
98
Fork 数
27
未关闭 Issue
3

README 摘要

CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204 vulnerability in Exiftool. About the vulnerability The CVE-2021-22204 was discovered and reported by William Bowling. (@wcbowling) This exploit was made by studying the exiftool patch after the CVE was already reported. Pre-requisites Installed exiftool and djvulibre tools. If you are on Debian or ubuntu you can install with: How to run: Change the IP and…

完整内容见 GitHub 原始 README 或本页 。

常见问题

CVE-2021-22204-exiftool 用什么语言开发?

主要使用 Perl 编写,目前有 98 个 Star。

如何获取 CVE-2021-22204-exiftool 的源码?

可以直接克隆仓库:git clone https://github.com/convisolabs/CVE-2021-22204-exiftool.git,默认分支为 master;安装与运行步骤见仓库 README。

CVE-2021-22204-exiftool 最近还在维护吗?

仓库最近一次更新为 2021年5月21日,当前有 3 个未关闭 Issue;Star 数为 98,可作为社区活跃度的参考。

关于

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

描述取自 GitHub 官方 API,中文内容由 GitRead 中文社区 编辑团队整理。

简要分析

热度分
161
价值分
67
活跃状态
活跃

语言占比

Dockerfile
Perl
Python

README

CVE-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool.

About the vulnerability

The CVE-2021-22204 was discovered and reported by William Bowling. (@wcbowling)

This exploit was made by studying the exiftool patch after the CVE was already reported.

Pre-requisites

Installed exiftool and djvulibre tools. If you are on Debian or ubuntu you can install with:

sudo apt install djvulibre-bin exiftool

How to run:

Change the IP and Port in the exploit.py file. You can test the reverse shell with

nc -nvlp 9090  # or the port you specify in the exploit.py file

Then:

python3 exploit.py

And the image.jpg will trigger the vulnerability when opened with a vulnerable exiftool.

If you want to practice, there is a small lab here.

评论

暂无评论