CVE-2020-15906 #32
CVE-2020-15906 #32
Conversation
There was a problem hiding this comment.
Please remove the venv folder. Also, the exploit doesn't seem to be working:
2024-11-21 08:24:25,135 - INFO - [ubuntu] Executing 'python3 /opt/Tiki-wiki-CMS/poc.py 127.0.0.1:8080 / id'...
2024-11-21 08:24:27,892 - CRITICAL - [main] Command failed: <UnexpectedExit: cmd='python3 /opt/Tiki-wiki-CMS/poc.py 127.0.0.1:8080 / id' exited=1>
| @@ -0,0 +1,5 @@ | |||
| blueprint: ubuntu2204 | |||
There was a problem hiding this comment.
Use the ubuntu2204-ubuntu2204 blueprint. Install and run the tikiwiki Docker container ubuntu1, copy the exploit to ubuntu2, run the exploit on ubuntu2 that would attack ubuntu1. Make sure that router_raw.pcap captures the network traffic. The goal is to get the traffic!
| version: '3' | ||
| services: | ||
| web: | ||
| image: vulhub/tikiwiki:21.1 |
There was a problem hiding this comment.
Please download the Docker image and keep it in the data folder. Install it from the file.
| src: ./data/poc.py | ||
| dest: /opt/Tiki-wiki-CMS | ||
|
|
||
| - name: Start Docker Compose services |
There was a problem hiding this comment.
Use community.docker.docker_compose instead of shell commands
No description provided.