CVE-2022-26134 PoC — Atlassian Confluence Server 注入漏洞

Description

CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script

介绍

# exploit_CVE-2022-26134
CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. 

This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine.
Just need to enter organisation as following. It will mak e query to shodan and will get all vulnerable servers.


Usage:
python main.py "organisation name"
  
  
Prerequites:
  1) Enter your Shodan key in code as:
    YOUR_API_KEY_HERE=' '
  
  2) pip install -r requirements.txt
  

文件快照

备注