thinkphp v5.x 远程代码执行漏洞poc

2019-04-19 16:17:33 浏览数 (1)

thinkphp v5.x 远程代码执行漏洞poc

Introduction:

近日,thinkphp团队发布了版本更新,其中修复了一处远程代码执行漏洞,可直接getshell,影响范围:v5.x < 5.1.31,<= 5.0.23

Dependencies:

pip -r install requirements.txt

Usage:

代码语言:javascript复制
python thinkphp_rce_poc.py
[-] Usage: thinkphp_rce_poc.py -u http://www.targeturl.com
[!] Error: argument -u/--url is required

Screenshot:

Github:

https://github.com/heroanswer/thinkphp_rce_poc/

0 人点赞