Analyze a CVE exploitation
publishScreenshots from the blog posts
Summary
In this post, we understand CSRF exploit for openITCOCKPIT leading to RCE. It all starts from implanting an OS command in the macro, that's used in a host command, then that host command is used for the host. The monitoring configuration when refreshed gives the attacker the reverse shell!
Script link
openITCOCKPIT 3.6.1-2 - Cross-Site Request Forgery. CVE-2019-10227 . webapps exploit for PHP platform
Description
Tags
Comments (0)