CVE-2021-43857 PoC — Gerapy may contain remote code execution vulnerability

Source

https://github.com/lowkey0808/CVE-2021-43857

Associated Vulnerability

Title: Gerapy may contain remote code execution vulnerability (CVE-2021-43857)
Description:Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

Description

CVE-2021-43857(gerapy命令执行)

Readme

# CVE-2021-43857
CVE-2021-43857(gerapy命令执行)
# 免责声明
```
脚本仅供学习参考，请勿恶意攻击他人网站，
如违法乱纪，造成一切后果由使用者自行承担
技术无罪，与作者无关


使用脚本默认同意以上说明！
                    --Author:lowkey0808
```


# 使用方式

```
  -h, --help  show this help message and exit
  -u          url
  -U          登录用户
  -P          登录密码
  -r          反弹shellIP
  -p          反弹端口
```
![图片](https://user-images.githubusercontent.com/49674960/165203227-c8c1b3ca-a3c3-44f7-8183-aa00521892d8.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →