安全圈 | 专注于最新网络信息安全讯息新闻

首页

imagetragick/pocs:cve概念的證明

作者 eppolito 时间 2020-02-27
all

如何使用

git clone https://github.com/ImageTragick/PoCs.git cd PoCs ./test.sh

要測試policy.xml檔案,請將其放在腳本目錄中並運行test.sh。

policy.xml test.sh

安全輸出

[email protected]:~/code/PoCs$ ./test.sh testing read SAFE testing delete SAFE testing http with local port: 38663 SAFE testing http with nonce: a7DyBeV7 SAFE testing rce1 SAFE testing rce2 SAFE testing MSL SAFE

不安全輸出

[email protected]:~/code/PoCs$ ./test.sh testing read UNSAFE testing delete UNSAFE testing http with local port: 44755 UNSAFE testing http with nonce: a7DvBer2 UNSAFE testing rce1 UNSAFE testing rce2 UNSAFE testing MSL UNSAFE