CVE-2022-24716 PoC — Icinga Web 2 路径遍历漏洞

介绍

# CVE-2022-24716

Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 <2.8.6, <2.9.6, <2.10

https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/

Help:

`python3 exploit.py -h`

Usage example:

`python3 -u http://127.0.0.1:8080 -f /etc/passwd`

DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit.

文件快照

备注