CVE-2020-9484

Reference

Authored by redtimmysec, masahiro331
https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz

[+] I just analyzed 1-day exploit. then remodeled.

Description

Compared to the before PoC, it has the following advantages.

[+] Environment Script for Ubuntu 18.04.

[+] You can edit command to use to Remote Code Execution.

[+] The cookie value has been set in advance in the PoC Code.

Usage

# id : qerogram
# pw : 1234

$ cd /exploit

# Auto set the environment
$ sudo sh ./environ.sh

# Apply the PoC Source Code
$ sudo python3 ./exploit.py <cmd>

# Go to the Web -> result : Remote Code Execution!

Install Link(VMWare Image - Ubuntu 18.04)

https://drive.google.com/file/d/16MGyX9FiJjl1couxJddFpaPzxWyzIAuN/view?usp=sharing