CVE-2019-0604 PoC — Microsoft SharePoint 输入验证错误漏洞

Source

https://github.com/davidlebr1/cve-2019-0604-SP2010-netv3.5

Associated Vulnerability

Title:Microsoft SharePoint 输入验证错误漏洞 (CVE-2019-0604)
Description:A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Description

Generate Seralize Payload for CVE-2019-0604 for Sharepoint 2010 SP2 .net 3.5

Readme

# cve-2019-0604-SP2010-netv3.5

Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that
the server was on .net 3.5 which require a different library. 

Here is the .dll for .net 3.5. The code came from https://github.com/linhlhq/CVE-2019-0604. It will generate the 
serialize payload.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!