Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP 参考exp: https://github.com/SNCKER/CVE-2021-3129 版本要求 Laravel Iginition == 2.5.1 通过EXP的本地版本 Laravel 8.4.2 注意事项 需要将该exp放置在phpgcc目录下，否则无法调用phpgcc exmaple...

CVE-2021-3129

CVE-2021-3129 Herramientas de escaneo masivo para el modo de depuración de Laravel = V8.4.2, Ejecución Remota de Código RCE | Python Referencia Ambionics.io PHPGCC Cadena PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2...

better-poc-for-CVE-2018-15133

CVE-2018-15133 的更好的 PoC 针对 CVE-2018-15133 的自动化 PoC 所有功劳归于 kozmic，他制作了 CVE-2018-15133 的原始 PoC 这只是我在做某个具有此漏洞的实验室机器时编写的自动化脚本，因为我不想每次运行不同命令时都用 phpggc 生成新的反序列化对象 要求：- 1. 克隆仓库 2. 通过你的 apt 仓库或机器上的任何其他仓库安装 phpggc 3. 脚本会提示你输入必要的内容 享受吧 :...

Laravel Framework Remote Code Execution (CVE-2018-15133)

A command injection vulnerability exists in Laravel Framework. This is due to insufficient handling of X-XSRF-TOKEN header in phpgcc library. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PHPGCC Payloads Remote Code Execution

PHPGCC is a collection of utilities and property-oriented programming "gadget chains" discovered in common php libraries that can, under the right conditions, exploit Java applications performing unsafe deserialization of objects. Successful exploitation of unsafe deserialization objects could le...