CVE-2019-7609 PoC — Elasticsearch Kibana 代码注入漏洞

Source

https://github.com/Akshay15-png/CVE-2019-7609

Associated Vulnerability

Title: Elasticsearch Kibana 代码注入漏洞 (CVE-2019-7609)
Description:Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Description

Exploit for CVE-2019-7609 in python

Readme

# CVE-2019-7609
Kibana Exploit for CVE-2019-7609 in python 
This exploit can give you RCE

**Help**

![photo1](https://github.com/Akshay15-png/CVE-2019-7609/assets/93660973/9afbecd1-2c2a-4fc9-bbaf-5049ffcbf845)


**Listening on port 4242**

![photo2](https://github.com/Akshay15-png/CVE-2019-7609/assets/93660973/bb41ee50-2678-4bd1-8e1a-b2f39469f1e5)



**Running exploit**

![photo3](https://github.com/Akshay15-png/CVE-2019-7609/assets/93660973/c469e22e-eea9-447e-aaa3-0d19abc36e89)


**Initial Access**

![photo4](https://github.com/Akshay15-png/CVE-2019-7609/assets/93660973/c074494d-3666-42e1-b143-6b36218a7224)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →