CVE-2022-42889 PoC — Apache Commons Text 代码注入漏洞

Source

Associated Vulnerability

Description

RCE PoC for Apache Commons Text vuln

Readme

## Quickstart

```bash
sudo apt install golang
```

To run like Python:
```bash
go run main.go arg1 arg2
```

To build executable:
```bash
go build main.go
```

Usage:
```bash
non@woa:~/program$ go run main.go 
[-] Usage: ./program vulnerable/web?param= 'ls -la'
```

-----

## To Do:
- Reverse shell capabilities (https://gobyexample.com/spawning-processes)
- Better error handling, know there is a logic bug where if you change ?search to ?sea, program flow still reaches command success end line 

File Snapshot

 [4.0K]  /data/pocs/37aa1448cfd8f6f05c56c9655bdb57fffc059b09
├── [  50]  go.mod
├── [1.2K]  LICENSE
├── [ 723]  main.go
├── [2.9K]  possiblepoc.go
└── [ 499]  README.md

0 directories, 5 files

Remarks