A simple PoC for Atlassian Bitbucket RCE [CVE-2022-36804]
# Atlassian Bitbucket RCE PoC - CVE-2022-36804
This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands:
```
echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py
```
Or you can create a targets file from another tools like (subfinder, sublist3r or go-dork etc.)
```
cat targets.txt | python3 cve-2022-36804.py
```
## References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36804
https://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html
登录后查看神龙缓存的 POC 文件快照
登录查看