CVE-2023-35813 PoC — Sitecore 安全漏洞

Source

Associated Vulnerability

Description

An exploit for the Sitecore Remote Code Execution Vulnerability

Readme

Sitecore Remote Code Execution Vulnerability

CVE: 2023-35813 (discovered by @mwulftange)
CVSS Score: 9.8
Severity: Critical 

This is the fantastic blog post from the researchers that found it:
https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/

Figure out what command you want to use, and put it in a file called command.txt
then run command.py to encode it

after it's encoded run the exploit.py script with the hostname of the target as the arg

File Snapshot

 [4.0K]  /data/pocs/24cec366fc898fd708b8371e8e1c2c430ab46f5c
├── [ 685]  command.py
├── [ 359]  commandRedirect.txt
├── [ 300]  command.txt
├── [ 738]  exploit.py
└── [ 469]  README.md

0 directories, 5 files

Remarks