CVE-2021-26084 PoC — Atlassian Confluence Server 注入漏洞

Source

https://github.com/quesodipesto/conflucheck

Associated Vulnerability

Title:Atlassian Confluence Server 注入漏洞 (CVE-2021-26084)
Description:Atlassian Confluence Server是澳大利亚Atlassian公司的一套具有企业知识管理功能，并支持用于构建企业WiKi的协同软件的服务器版本。 Atlassian Confluence Server and Data Center 存在注入漏洞，经过身份验证的用户在Confluence 服务器或数据中心实例上执行任意代码。以下产品及版本收到影响：All 4.x.x versions、All 5.x.x versions、All 6.0.x versions、All 6.1.x ver

Description

Python 3 script to identify CVE-2021-26084 via network requests.

Readme

# ConfluCHECK
Python 3 script to identify CVE-2021-26084 via network requests.

## Requirement
> pip install -r requirements.txt

## How to use

First of all, said that i'm not an expert programer then... i'm pretty sure that my code may be improve, i will accept pull request.

> python3 conflucheck.py

![alt text](https://raw.githubusercontent.com/quesodipesto/conflucheck/main/images/imagen_0.png)

> python3 conflucheck.py http://xxx.xxx.xxx.xxx:yyyy

![alt text](https://github.com/quesodipesto/conflucheck/blob/d521d28fbe058332044422c09c5783a2b6eb6955/images/imagen_1.png)

> python3 conflucheck.py file_with_links.txt

![alt text](https://raw.githubusercontent.com/quesodipesto/conflucheck/main/images/imagen_2.png)
![alt text](https://raw.githubusercontent.com/quesodipesto/conflucheck/main/images/imagen_3.png)

File Snapshot


 [4.0K]  /data/pocs/063732261c9ab7c6c52c8b6f0ef25c9127cb64b3
├── [7.5K]  conflucheck.py
├── [4.0K]  images
│   ├── [ 12K]  imagen_0.png
│   ├── [ 13K]  imagen_1.png
│   ├── [ 16K]  imagen_2.png
│   └── [9.6K]  imagen_3.png
├── [ 821]  README.md
└── [  67]  requirements.txt

1 directory, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!