CVE-2020-11981-PoC

Example Build demo stand root@kitploit: docker-compose up -d VM docker-container: 172.18.0.2 Command PoC root@kitploit: docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt INFO Vulnerabili...

Exploit for OS Command Injection in Apache Airflow

Example Build demo stand bash docker-compose up -d...

CVE-2020-11981

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands...