CVE-2015-9238 PoC — secure-compare 安全漏洞

Source

https://github.com/m0d0ri205/wargame-turkey_in_2

Associated Vulnerability

Title: secure-compare 安全漏洞 (CVE-2015-9238)
Description:secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.

Description

CVE-2015-9238, Unicode bypass

Readme


# wargame
1. flag file divide
2. Brute force prevent -> delay 5000(5s)
3. logging
4. password hashing





# -wargame-turkey_in_2

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →