CVE-2021-29156 PoC — Forgerock ForgeRock OpenAM 注入漏洞

Description

Exploit for CVE-2021-29156

介绍

# CVE-2021-29156 done right

This Proof of Concept is realized because the other PoC publicly available is broken ✨

## Install

```
go install github.com/5amu/CVE-2021-29156@latest
```

## References

* [https://nvd.nist.gov/vuln/detail/CVE-2021-29156](https://nvd.nist.gov/vuln/detail/CVE-2021-29156)
* [https://portswigger.net/research/hidden-oauth-attack-vectors](https://portswigger.net/research/hidden-oauth-attack-vectors)
* [https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0](https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0)

文件快照

备注