Sploitus

Exploit for Expression Language Injection in Sonatype Nexus

githubexploit · 2020-04-07

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=80EA1A5C-5F69-52ED-9FE6-BF7F6E36E775
# CVE-2020-10199-10204

http://1984-0day.com

```
python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token

parse = argparse.ArgumentParser()
parse.add_argument('-i', '--ip', help='ip')
parse.add_argument('-p', '--port', default='8081', help='port')
parse.add_argument('-c', '--cookie',  help='HTTP cookie')
parse.add_argument('-csrf', '--csrf',  help='NX-ANTI-CSRF-TOKEN')
```