CVE-2021-41277 PoC — Metabase 路径遍历漏洞

Description

 Metabase 任意文件读取

介绍

# Metabase-cve-2021-41277
 Metabase 任意文件读取
optional arguments:

-h, --help show this help message and exit

-u url, --url url Target url eg:"http://127.0.0.1"

-f file, --file file Targets in file eg:"ip.txt"

# Use
eg1:>>>python3 Metabase-cve-2021-41277.py -u http://127.0.0.1

eg2:>>>python3 Metabase-cve-2021-41277.py -f ip.txt

文件快照

备注