CVE-2020-13933 PoC — Apache Shiro 授权问题漏洞

Source

https://github.com/0xkami/cve-2020-13933

Associated Vulnerability

Title:Apache Shiro 授权问题漏洞 (CVE-2020-13933)
Description:Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

Description

cve-2020-13933 apache shiro权限绕过漏洞

Readme

# cve-2020-13933
cve-2020-13933 apache shiro权限绕过漏洞
这个复现非常简单，先用IDEA+shiro搭环境
参考：https://www.cnblogs.com/ph4nt0mer/p/13535999.html
然后运行，访问，抓包即可

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!