to016

This Gist provides a Proof-of-Concept (POC) for CVE-2023-41892, a Craft CMS vulnerability that allows Remote Code Execution (RCE).

Overview

CVE-2023-41892 is a security vulnerability discovered in Craft CMS, a popular content management system. Craft CMS versions affected by this vulnerability allow attackers to execute arbitrary code remotely, potentially compromising the security and integrity of the application.

POC

This POC is depending on writing webshell, so finding a suitable folder with writable permission is necessary.

IgorDuino

import requests
import argparse
import os
import json


def send_message_with_button_and_photo(
    chat_id, html_file, button_text, button_url, photo_path=None
):
    bot_token = os.environ.get("BOT_TOKEN")

yellinben

// Add these settings at the end of VSCode's `settings.json` file to allow HTTP inspection.
// For use with any MITM, self-signed HTTP proxy (Proxyman, Charles, Fiddler, etc).

// Last tested on VSCode 1.78.2. It's possible security settings will be hardened in future releases.
// Make sure to enable SSL-proxying of relevant hostnames to intercept complete requests/responses.
// For Copilot: `copilot-proxy.githubusercontent.com`

// These settings are obviously not secure, so disable them when not needed!
{
	/* rest of your vscode settings */  

shalior

const url = require('url');

function vlessLinkToV2rayConfigObject(link) {
    const parsedUrl = url.parse(link, true);

    const configObj = 
    {
        "dns": {
          "hosts": {
            "domain:googleapis.cn": "googleapis.com"

IgorDuino

adb shell pm uninstall -k --user 0 com.android.browser #Mi Browser
adb shell pm uninstall -k --user 0 com.android.calendar #Calendario
adb shell pm uninstall -k --user 0 com.android.deskclock #Reloj
adb shell pm uninstall -k --user 0 com.android.mms #Mensajes
adb shell pm uninstall -k --user 0 com.facebook.appmanager #Facebook App Manager
adb shell pm uninstall -k --user 0 com.facebook.services #Facebook Services
adb shell pm uninstall -k --user 0 com.facebook.system #Facebook App Installer
adb shell pm uninstall -k --user 0 com.google.android.apps.docs #Google Drive
adb shell pm uninstall -k --user 0 com.google.android.apps.maps #Google Maps
adb shell pm uninstall -k --user 0 com.google.android.apps.photos #Google Photos

PSJoshi

Change rbash to bash

psj@ubuntu:~$ ssh psj@server_name-t "bash --noprofile"

List available commands:

$ compgen -c 

Essentially you need to do the following:

Pliner

:do {
    :do {
        /file remove "/ipsum.rsc";
        /file remove "/subnet.rsc";
    } on-error={}

    :put "Downloading ipsum.rsc...";
    :do {
	/tool fetch url="https://antifilter.download/list/ipsum.rsc" dst-path="/ipsum.rsc"
    } on-error={