CVE-2023-28432 PoC — MinIO 信息泄露漏洞

Source

https://github.com/LHXHL/Minio-CVE-2023-28432

Associated Vulnerability

Title:MinIO 信息泄露漏洞 (CVE-2023-28432)
Description:MinIO是美国MinIO公司的一款开源的对象存储服务器。该产品支持构建用于机器学习、分析和应用程序数据工作负载的基础架构。 MinIO 存在信息泄露漏洞，该漏洞源于在集群部署中MinIO会返回所有环境变量，导致信息泄露。

Readme

# Minio-CVE-2023-28432

**用于Minio-CVE-2023-28432信息泄露的检测工具。仅用于学习和授权测试目的。**

**个人分析https://lhxhl.github.io/2023/04/03/minio2023/**

## 使用方法

**需要golang语言环境**

```bash
go build main.go
./main -h //使用帮助
./main -u url //单个url检测
./main -f file.txt //批量检测
```

**错误信息会写入err.txt，批量检测，成功的结果会报存在result.txt**

![image-20230406203902567](https://p.ipic.vip/4w8ogv.png)

File Snapshot


 [4.0K]  /data/pocs/f3ef440655729eac59db60d06c3ce2de3cbbed25
├── [6.5K]  err.txt
├── [  37]  go.mod
├── [6.1M]  main
├── [5.4K]  main.go
├── [ 503]  README.md
├── [ 216]  result.txt
└── [ 192]  urls.txt

0 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!