CVE-2015-6576 PoC — Atlassian Bamboo 代码注入漏洞

Source

https://github.com/CallMeJonas/CVE-2015-6576

Associated Vulnerability

Title:Atlassian Bamboo 代码注入漏洞 (CVE-2015-6576)
Description:Atlassian Bamboo是澳大利亚Atlassian公司的一套持续集成构建工具。该工具可帮助开发团队使用持续交付功能构建、测试、发布和部署项目。 Atlassian Bamboo 5.8.5之前的2.2版本和5.9.7之前的5.9.x版本中存在远程代码执行漏洞。远程攻击者可利用该漏洞在受影响系统中执行任意代码。

Description

A PoC for the Bamboo deserialization exploit

Readme

# CVE-2015-6576
A PoC for the Bamboo deserialization exploit

File Snapshot


 [4.0K]  /data/pocs/343fba8a00974b6143d17ade97e1648154f0aa64
├── [1.8K]  bamboo.py
├── [1.0K]  LICENSE
└── [  61]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!