CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Description

Perform With Mass Exploits In WSO Management.

介绍

## CVE-2022-29464
- CVE-2022-29464 is a critical vulnerability in WSO2 Identity Server, an open-source identity and access management platform. The vulnerability allows remote attackers to upload malicious JSP files that can execute arbitrary commands on the target system with administrative privileges. The vulnerability is a file upload function issue that is exploited by bypassing the file extension validation mechanism. The vulnerability was assigned a CVSS score of 9.8, indicating its severity.
## Example Dorks
```
title:"WSO2 Carbon Server"
```
## Screenshot
![Screenshot_3](https://user-images.githubusercontent.com/25004320/234240252-25e4baba-b299-4775-a909-7b6e4cafeb18.png)
![Screenshot_4](https://user-images.githubusercontent.com/25004320/234240331-42e1852b-7582-4dd0-b781-5ef0a6fc2902.png)
## Requirements
- Python3.7+
## Supported Os
- Linuxer
- Wingays
## Get start with
```
$ git clone https://github.com/Pari-Malam/CVE-2022-29464
$ cd CVE-2022-29464
$ pip/pip3 install -r requirements.txt
$ python/python3 wso.py
```
## Footprints Notes
- By using this tool, you agree that you are using it for educational purposes only and that you will not use it for any illegal activity. You also agree to bear all risks associated with the use of this tool. I will not be responsible for direct or indirect damage caused by the use of this tool. Don't suyyyyyyyyyyyyyyyyyyyy me!
## Author
- Pari Malam
## Contacts
[![Telegram](https://img.shields.io/badge/-Telegram-blue)](https://telegram.me/SurpriseMTFK)
[![Discord](https://img.shields.io/badge/-Discord-purple)](https://discordapp.com/users/829404192585678858)

文件快照

备注