Analyzing exploit for Pre-Auth RCE in Moodle (CVE-2021-36394)

Analyzing exploit for Pre-Auth RCE in Moodle (CVE-2021-36394)

CVEs

9.8 Critical Severity

Screenshots from the blog posts

images/cly46udkvvvmt1joidgxiahlu.jpgimages/cly46udkvvvmt1joidgxiahlu.jpg

Summary

In this post, we analyze a pre-auth RCE exploit script for Moodle (more specifically, the Shibboleth authentication module). We understand the limitations of the script, and understand its inner workings to pwn a vulnerable Moodle instance

Script link

Contribute to lavclash75/CVE-2021-36394-Pre-Auth-RCE-in-Moodle development by creating an account on GitHub.

image

Description

@secatgourity

190 posts

Total vcoins

0

Social media links

Comments (1)