CVE-2018-1000006 PoC — GitHub Electron 安全漏洞

Source

https://github.com/CHYbeta/CVE-2018-1000006-DEMO

Associated Vulnerability

Title: GitHub Electron 安全漏洞 (CVE-2018-1000006)
Description:GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.

Description

The Demo for CVE-2018-1000006

Readme

# CVE-2018-1000006-DEMO
The Demo for CVE-2018-1000006

# Analysis
[Electron < v1.8.2-beta.4 远程命令执行漏洞—【CVE-2018-1000006】](https://xianzhi.aliyun.com/forum/topic/1990)

# POC
可以直接使用 elec_rce\elec_rce-win32-x64\elec_rce.exe

也可以自己打包成exe应用,生成有漏洞的版本应用，以版本1.7.8为例：
```
electron-packager ./test elec_rce --win --out ./elec_rce --arch=x64 --version=0.0.1 --electron-version=1.7.8 --download.mirror=https://npm.taobao.org/mirrors/electron/
```

![](https://github.com/CHYbeta/chybeta.github.io/blob/master/images/pic/20180124/3.jpg?raw=true)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →