CVE-2020-10560 PoC — Open Source Social Network 加密问题漏洞

Source

https://github.com/kevthehermit/CVE-2020-10560

Associated Vulnerability

Title: Open Source Social Network 加密问题漏洞 (CVE-2020-10560)
Description:An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.

Description

CVE-2020-10560 OSSN Arbitrary File Read

Readme

# CVE-2020-10560
CVE-2020-10560 OSSN Arbitrary File Read

For details on how to use this repository refer to https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read

#### Starting
`docker-compose up --build`

#### Installing

Once the images are running, you can access the install page at 127.0.0.1 or 10.2.0.101

If you want to use BURP do not install on 127.0.0.1 as you will have issues with URLS redirecting. 

At the installaion page fill in all the details. You can read or edit the compose file for creds. 

- DB: ossn
- username: ossn
- password: ossn
- host: mysqlserver

#### Site key

Read the blog post!


#### POC

There is a PHP and a python script again refer to the blog post for deatils on how to use it.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →