CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Description

cve-2022-29464 EXP

介绍

# CVE-2022-29464
CVE-2022-29464 POC exploit

https://github.com/superzerosec/CVE-2022-29464

https://github.com/hakivvi/CVE-2022-29464

Based on it, the functions of detection and arbitrary file upload are added.

Vulnerability author:   superzerosec

Original author:    hakivvi

# Usage
optional arguments:

  -h, --help            show this help message and exit
  
  -u URL, --url URL     Target url, http://localhost:9443
  
  -l LIST, --list LIST  List of target url saperated with new line
  
  -w WEBSHELL, --webshell WEBSHELL
                        Webshell filename
                        
  -r READ, --read READ  Enter the file path to upload any file
  
  -s, --search          Scan question URL

文件快照

备注