CVE-2020-13151 PoC — Aerospike 操作系统命令注入漏洞

Description

POC for CVE-2020-13151

介绍

# CVE-2020-13151 POC

## Aerospike Database (< 5.1.0.3) Host Command Execution

Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html

- `poc.lua` shows manual exploitation of the server

- `cve2020-13151.py` for automated exploitation

- `run-poc.sh` sets up a docker environment for local experimentation

文件快照

备注