CVE-2019-7609 PoC — Elasticsearch Kibana 代码注入漏洞

Description

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

介绍

# CVE-2019-7609
exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts



**snapshot**

![exploit](exploit.png)



**usage**

```python
# python2 CVE-2019-7609-kibana-rce.py -h

usage: CVE-2019-7609-kibana-rce.py [-h] [-u URL] [-host REMOTE_HOST]
                                   [-port REMOTE_PORT] [--shell]

optional arguments:
  -h, --help         show this help message and exit
  -u URL             such as: http://127.0.0.1:5601
  -host REMOTE_HOST  reverse shell remote host: such as: 1.1.1.1
  -port REMOTE_PORT  reverse shell remote port: such as: 8888
  --shell            reverse shell after verify

```

文件快照

备注