CVE-2016-3714 PoC — ImageMagick 输入验证错误漏洞

Source

https://github.com/Hood3dRob1n/CVE-2016-3714

Associated Vulnerability

Title: ImageMagick 输入验证错误漏洞 (CVE-2016-3714)
Description:The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."

Description

ImaegMagick Code Execution (CVE-2016-3714)

Readme

# CVE-2016-3714
ImageMagick Code Execution (CVE-2016-3714)<br/>
<br/>
imagick_builder.py = Simple Payload Builder to Exploit CVE-2016-3714<br/>
imagick_bypass_shell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions<br/>
<br/>
Few Images of things working:<br/>
Payload Builder:<br/>
<img src="http://i.imgur.com/NIfEgvp.png"><br/>
imagick payload vs vBulletin 4.x w/ImageMagick Enabled:<br/>
<img src="http://i.imgur.com/BNRIaSw.png"><br/>
server side after payload triggers:<br/>
<img src="http://i.imgur.com/IYvPbfx.png"><br/>
<br/>
<br/>
Web Shell:<br/>
Command Execution:<br/>
<img src="http://i.imgur.com/tZtJX7l.png"><br/>
File Read:<br/>
<img src="http://i.imgur.com/lAwTrb1.png"><br/>
<br/>
<br/>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →