gogsownz

GogsOwnz GogsOwnz is a simple script to gain administrator rights and RCE on a Gogs/Gitea server. Exploit vulnerabilities in Gogs/Gitea, including CVE-2018-18925 , CVE-2018-20303. Legal Disclaimer This script is offered as is. No warranty, use on your own, please obey the law. Typical Usage -...

CVE-2018-20303

Gogs (Go Git Service) contains a directory traversal vulnerability in the file-upload path (pkg/tool/path.go) prior to version 0.11.82.1218 that can allow an attacker to create files under data/sessions on the server. The issue is documented as CVE-2018-20303 and is related to CVE-2018-18925 in b...