CVE-2020-28653 PoC — ZOHO ManageEngine OpManager 安全漏洞

Source

https://github.com/tuo4n8/CVE-2020-28653

Associated Vulnerability

Title:ZOHO ManageEngine OpManager 安全漏洞 (CVE-2020-28653)
Description:ZOHO ManageEngine OpManager是美国卓豪（ZOHO）公司的一套网络、服务器及虚拟化监控软件。 Zoho ManageEngine OpManager Stable build before 125203 存在安全漏洞，该漏洞允许通过智能更新管理器(SUM) servlet远程执行代码。

Readme

# CVE-2020-28653

- Version: 2016 - 2020 (before patch)

- Usage:
```
python exploit.py http://vuln-web.com
```

![rce.png](rce.png)

File Snapshot


 [4.0K]  /data/pocs/571ef52b806e3a295df939597540044d8b80ed72
├── [1.3K]  exploit.py
├── [4.6K]  gadget-2016.bin
├── [4.6K]  gadget-2017.bin
├── [4.6K]  gadget-2018.bin
├── [4.6K]  gadget-2019.bin
├── [4.6K]  gadget-2020.bin
├── [  10]  int.bin
├── [4.7K]  rce.png
└── [ 134]  README.md

0 directories, 9 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!