Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2016-3714 PoC — ImageMagick 输入验证错误漏洞

Source
Associated Vulnerability
Title:ImageMagick 输入验证错误漏洞 (CVE-2016-3714)
Description:The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."
Readme
#ImageTragick-CVE-2016-3714-RShell
These are CVE-2016-3714 mvg/svg POCs using bash, nc, php and other tools to build a reverse shell.
#Declaration
For research and ethical hacking only...
#Usage
1. Server Side : nc -l - p [port number]
2. upload the pictures to vul sites

#Acknowledge
Thankd ding@virgoTeam for providing php reverseshell POC
#Reference
https://imagetragick.com/

                                                jpeanut@VirgoTeam
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →