CVE-2020-11978 PoC — Apache Airflow 操作系统操作系统命令注入漏洞

介绍

# What
## Part A - Prereqs
- hud cli
- Docker


## Part A - Setup
- In the root of this repo:
    - Run `hud build`
    - Run `hud dev`

## Part B - Prereqs
- uv

## Part B - Setup
- In the root of this repo run: 
    - `uv sync`
    - `uv venv`
    - `source .venv/bin/activate`
    - `cp .env.example .env`

- Replace the dummy API keys with your own.

- Then run `python test_full_info.py`

## Troubleshooting
- If you need to cache bust:
```
hud dev . -e --no-cache --build
```

---

## Pentest
`python run_pentest_task.py`

文件快照

备注