gitlab-12.9.0-file-read

警告 仅用于演示目的和道德黑客行为。 说明 一个（试图）比 exploit-db 上关于 GitLab v12.9.0（CVE-2020-10977）的已认证任意文件读取脚本更好的脚本。 使用方法 1. 满足依赖（你可能已经安装了其余部分） pip3 install requests python-gitlab 2. 使用你的凭据获取一个API令牌 https://docs.gitlab.com/ee/user/profile/personalaccesstokens.html 3. 收获？ root@kitploit: $ python3 gitlab-12.9.0-lfi.py -h...

CVE-2020-10977.py

CVE-2020-10977.py GitLabの認証済み任意ファイル読み取り CVE-2020-10977 使用方法: CVE-2020-10977.py -h --verifySSL -f FILELIST host token GitLabのローカルファイルインクルージョン（認証済み任意ファイル読み取り - CVE-2020-10977）のエクスプロイトです。変数 pullfiles を変更してホストから取得したいすべてのファイルを含めるか、リストとしてスクリプトに提供してください。 位置引数: host GitLabインスタンスのホスト名（例：https://git.xxx.yy...

cve-2020-10977

Este repositorio no tiene un README...

Exploit for Path Traversal in Gitlab

CVE-2020-10977 read and execute About CVE-2020-10977 - Ha...

CVE-2020-10977

creationtimestamp| type| source ---|---|--- 2020-12-09 17:40:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlabfilereadrce.rb 2021-09-21 06:42:47+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/177 2024-10-09...

Exploit for Path Traversal in Gitlab

CVE-2020-10977.py authenticated arbitrary file read for Gitla...

Exploit for Path Traversal in Gitlab

CVE-2020-10977 GitLab 12.9.0 Arbitrary File Read Target...

CVE-2020-10977

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...

CVE-2020-10977

GitLab CVE-2020-10977 is an authenticated arbitrary file read (path traversal) vulnerability in GitLab CE/EE 8.5–12.9 used to exfiltrate Rails secret_key_base and chain a remote code execution via a crafted signed cookie. Public PoCs/exploits demonstrate reading secrets.yml and achieving RCE thro...

CVE-2020-10977

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. Recent assessments: wvu-r7 at June 09, 2020 10:49pm UTC reported: @zeroSteiner pointed us to this exploit chain today: . It uses CVE-2020-10535 to satisfy the authentication requirement. Note that...