关联漏洞
Description
Exploit for Red Hat / GlusterFS CVE-2018-1088 & CVE-2018-1112, featured @ DEFCON 26, Las Vegas!
介绍
# GEVAUDAN
Gluster Environment Vulnerable AUthentication Data Access & Nuke.
## Getting Started
Gevaudan is a Red Hat GlusterFS exploit for CVEs 2018-1088 & 2018-1112.
Available in both standalone and metasploit module formats.
## Presentations
|#| Date | Conference | Link to Video | Link to Slides |
|---|---|---|---|---|
|1|11-AGO-2018|DEFCON 26 Data Duplication Village| https://www.youtube.com/watch?v=8IyJjRVTMAk | https://drive.google.com/open?id=1O1Bk4iXlsmO8cq9aCvAv_TFIvsL-d2YzUZga5k_f_Xg |
### Running
Standalone:
```
ruby gevaudan.rb
```
Metasploit:
```
sudo mkdir -p $HOME/.msf4/modules/exploits/unix
mv metasploit/gluster_shared_storage.rb $HOME/.msf4/modules/exploits/unix/
msfconsole
```
文件快照
[4.0K] /data/pocs/2e263922f4570c9155a5bdccea0d8a56e809b07e
├── [1.3K] chastel.rb
├── [ 502] Dockerfile
├── [4.0K] docs
│ ├── [ 36K] Chastel.png
│ ├── [ 85K] Gevaudan MSF3.png
│ └── [ 95K] Gevaudan.png
├── [4.2K] gevaudan.rb
├── [4.0K] metasploit
│ └── [4.9K] gluster_shared_storage.rb
└── [ 714] README.md
2 directories, 8 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。