CVE-2016-4971 PoC — GNU Wget 安全漏洞

Source

https://github.com/mbadanoiu/CVE-2016-4971

Associated Vulnerability

Title:GNU Wget 安全漏洞 (CVE-2016-4971)
Description:GNU Wget是美国GNU社区的一套用于在网络上进行下载的自由软件，它支持通过HTTP、HTTPS以及FTP这三个最常见的TCP/IP协议下载。 GNU Wget存在安全漏洞。攻击者利用该漏洞通过将请求从HTTP重定向到特制的FTP资源来写入任意文件。

Description

CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit

Readme

# CVE-2016-4971
CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit</br>
</br>
Wget 1.18 < Arbitrary File Upload Exploit</br>
AND</br>
Wget 1.14-13.el7 < Arbitrary File Upload Exploit</br>
</br>
Modifications by: mbadanoiu</br>

## Original Exploit
Dawid Golunski</br>
dawid( at )legalhackers.com</br>
</br>
http://legalhackers.com/advisories/Wget-Arbitrary-File-Upload-Vulnerability-Exploit.txt</br>

File Snapshot


 [4.0K]  /data/pocs/ac73553d0840f94aa5e68033a9fb654726b3c05b
├── [3.1K]  exploit_wget.py
├── [ 437]  faststart_exploit.sh
└── [ 400]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!