CVE-2022-26134 PoC — Atlassian Confluence Server 注入漏洞

Source

Associated Vulnerability

Description

CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script

Readme

# exploit_CVE-2022-26134
CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. 

This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine.
Just need to enter organisation as following. It will mak e query to shodan and will get all vulnerable servers.


Usage:
python main.py "organisation name"
  
  
Prerequites:
  1) Enter your Shodan key in code as:
    YOUR_API_KEY_HERE=' '
  
  2) pip install -r requirements.txt
  

File Snapshot

 [4.0K]  /data/pocs/a856fab4589563ebc3bffebb6a28d6385f7aaf8b
├── [3.3K]  main.py
├── [ 570]  README.md
└── [  16]  requirements.txt

0 directories, 3 files

Remarks