Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Source
Associated Vulnerability
Title:WSO2 API Manager 路径遍历漏洞 (CVE-2022-29464)
Description:WSO2 API Manager是美国WSO2公司的一套API生命周期管理解决方案。 WSO2 API Manager 存在路径遍历漏洞,该漏洞允许无限制的文件上传和远程代码执行。
Description
Python script to exploit CVE-2022-29464 (mass mode)
Readme
# WSO2 Carbon Server CVE-2022-29464
Pre-auth RCE bug  CVE-2022-29464.

## Usage

```bash
python exploit.py -u <wso2_carbon_server> 
```
or:

```bash
python exploit.py -f <file>
```
## Zoomeye Dork

```bash

zoomeye search 'title:"WSO2 Management Console"'  -num 10  -filter=ip,port
```
## Shodan Dork

```bash

shodan search 'title:"WSO2 Management Console"' --fields ip_str,port  --limit 1000 --separator ":" | grep ''
```

File Snapshot

[4.0K] /data/pocs/124f45512062d9639683bb8bbced802c645556b7 ├── [4.5K] exploit.py ├── [4.6K] exploit-v2.py ├── [ 425] README.md ├── [ 109] shodan-dork.txt └── [ 75] zoomeye-dork.txt 0 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.