CVE-2012-2982 PoC — Webmin ‘file/show.cgi’任意命令执行漏洞

Source

https://github.com/AlexJS6/CVE-2012-2982_Python

Associated Vulnerability

Title: Webmin ‘file/show.cgi’任意命令执行漏洞 (CVE-2012-2982)
Description:file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.

Description

PoC Python script as an exercice from tryhackme.

Readme

# CVE-2012-2982_Python
PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting    
This is the metasploit CVE: https://www.exploit-db.com/exploits/21851   
Those are the changes done after the discovery of the Exploit: https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213    

---- 

### How to use:   
clone to repo, and then look at the script to see what you need to change.    

![exploit](assets/screen.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →