CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Source

https://github.com/LinJacck/CVE-2022-29464

Associated Vulnerability

Title:WSO2 API Manager 路径遍历漏洞 (CVE-2022-29464)
Description:WSO2 API Manager是美国WSO2公司的一套API生命周期管理解决方案。 WSO2 API Manager 存在路径遍历漏洞，该漏洞允许无限制的文件上传和远程代码执行。

Description

cve-2022-29464 EXP

Readme

# CVE-2022-29464
CVE-2022-29464 POC exploit

https://github.com/superzerosec/CVE-2022-29464

https://github.com/hakivvi/CVE-2022-29464

Based on it, the functions of detection and arbitrary file upload are added.

Vulnerability author:   superzerosec

Original author:    hakivvi

# Usage
optional arguments:

  -h, --help            show this help message and exit
  
  -u URL, --url URL     Target url, http://localhost:9443
  
  -l LIST, --list LIST  List of target url saperated with new line
  
  -w WEBSHELL, --webshell WEBSHELL
                        Webshell filename
                        
  -r READ, --read READ  Enter the file path to upload any file
  
  -s, --search          Scan question URL

File Snapshot


 [4.0K]  /data/pocs/565bead2296a9ef9002710cceebe7c7565a26088
├── [7.3K]  CVE-2022-29464.py
└── [ 710]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!