CVE-2022-31793 PoC — muhttpd 路径遍历漏洞

Source

https://github.com/xpgdgit/CVE-2022-31793

Associated Vulnerability

Title:muhttpd 路径遍历漏洞 (CVE-2022-31793)
Description:muhttpd是inglorion个人开发者的一个简单但完整的 Web 服务器。用可移植的 ANSI C 编写，支持日志记录、CGI 脚本、基于 MIME 类型的处理程序和 HTTPS。 muhttpd 1.1.7之前版本存在安全漏洞。攻击者利用该漏洞读取系统任意文件。

Readme

# CVE-2022-31793

-u 指定IP  -l 指定ip文件 -v 验证模式 -f 指定读取文件

python poc.py -u ip -v

python poc.py -l url.txt -v

python poc.py -u ip -f /etc/hosts

python poc.py -l url.txt -f /etc/hosts

File Snapshot


 [4.0K]  /data/pocs/8d1eb20552cd9e1e2e899b7f2b6fbed3abf9bb64
├── [3.7K]  POC.py
├── [ 215]  README.md
└── [  27]  url.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!