WSO2 RCE (CVE-2022-29464) exploit and bypass CloudFlare.
CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploading malicious JSP files.
The following blog post provides an in-depth analysis of how Cloudflare security measures are bypassed and the methods used in the process. If you want to learn more about the subject, you can check out my post for details.
Original repo (without Cloudflare Bypass): https://github.com/hakivvi/CVE-2022-29464 - @hakivvi
You can install the Requirements by running the command:
pip install requests
python3 exploit.py https://host
- Using Burpsuite:
