Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2012-2982 PoC — Webmin ‘file/show.cgi’任意命令执行漏洞

Source
Associated Vulnerability
Title:Webmin ‘file/show.cgi’任意命令执行漏洞 (CVE-2012-2982)
Description:Webmin是澳大利亚软件开发者Jamie Cameron和Webmin社区共同开发的一套基于Web的用于类Unix操作系统中的系统管理工具。 Webmin 1.590版本和较早版本中的file/show.cgi中存在漏洞。远程认证用户可利用该漏洞通过路径名中的无效字符如‘|’(竖线)字符,执行任意命令。
Description
PoC Python script as an exercice from tryhackme.
Readme
# CVE-2012-2982_Python
PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting    
This is the metasploit CVE: https://www.exploit-db.com/exploits/21851   
Those are the changes done after the discovery of the Exploit: https://github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213    

---- 

### How to use:   
clone to repo, and then look at the script to see what you need to change.    

![exploit](assets/screen.png)
File Snapshot

[4.0K] /data/pocs/e8f155ef617835c8d84cae9a2fd8f24e3b676a57 ├── [4.0K] assets │   └── [142K] screen.png ├── [1.0K] exploit.py └── [ 478] README.md 1 directory, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.