CVE-2023-22515 PoC — Atlassian Confluence Server 安全漏洞

介绍

# Automated Exploitation of CVE-2023-22515 - Confluence Privilege Escalation
This repository contains an automated exploit script for CVE-2023-22515, a critical vulnerability in Atlassian Confluence that allows unauthorized attackers to create administrative accounts and gain full control of vulnerable instances. The script supports both single-target and mass exploitation modes, making it suitable for penetration testers and security researchers.
# Features
- **Automated Exploitation** – Fully automated process for triggering the vulnerability and creating an admin account.
- **Single & Mass Exploitation** – Supports targeting a single URL or scanning multiple targets from a file.
- **Multi-threaded Execution** – Uses threading for faster mass exploitation.
- **Rich Output** – Provides detailed responses with user authentication details.
# Requirements
- Python 3.x
- `requests`, `rich`, `alive-progress`, `fire`
# Usage
- **Single Target Exploitation**: ```python exploit.py normal http://target-ip```
- **Multiple Target Exploitation**: ```python exploit.py mass targets.txt ```
# Disclaimer
This tool is intended for **educational and authorized penetration testing** only. Unauthorized use against systems you do not own is illegal. 

文件快照

备注