CVE-2021-43798 PoC — Grafana 路径遍历漏洞

Description

This script implements a lab automation where I exploit CVE-2021-43798 to steal user secrets and then gain privileges on a Linux system.

介绍

# LabAutomationCVE-2021-43798

I make a script for pentest automation where i exploit CVE-2021-43798 (a path traversal on Grafana) to steal user secrets (SSH key) and then gain privileges on a Linux system (using SUID).

I automate this lab to share the pentest methodology.

文件快照

备注