CVE-2021-22006 PoC — Vmware VMware vCenter Server 授权问题漏洞

Description

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

介绍

# CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
#### Analyze

![1632587348859](img/1632587348859.png)

![1632587404058](img/1632587404058.png)

![1632587421261](img/1632587421261.png)

#### Usage

```
-------------------------------------------------------------
[*] CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
[*] Github: https://github.com/r0ckysec
[*] Twitter: https://twitter.com/r0cky6861636b
[*] Author: r0cky
-------------------------------------------------------------


Usage: ./cve-2021-22005_exp -u <http://target>

Optional Arguments:
  -h help         Show This Help Message And Exit
  -u url          Will Send Payload To Target URL
  -s shell        One-click GetShell
  -p proxy        Specific Request Proxy
```



##### GetShell

![1632587653344](img/1632587653344.png)

文件快照

备注