Exploit for Expression Language Injection in Atlassian Confluence_Data_Center CVE-2020-0618 CVE-2022-26134

## https://sploitus.com/exploit?id=8A3D2F49-8E81-56D5-A63D-C7CEC6201B2E
```
╔════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗
║                                                                                                                    ║
║       ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗     ██████╗  ██████╗  ██╗██████╗ ██╗  ██╗       ║
║      ██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗    ╚════██╗██╔════╝ ███║╚════██╗██║  ██║       ║
║      ██║     ██║   ██║█████╗       █████╔╝██║██╔██║ █████╔╝ █████╔╝     █████╔╝███████╗ ╚██║ █████╔╝███████║       ║
║      ██║     ╚██╗ ██╔╝██╔══╝      ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══╝     ██╔═══╝ ██╔═══██╗ ██║ ╚═══██╗╚════██║       ║
║      ╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗███████╗    ███████╗╚██████╔╝ ██║██████╔╝     ██║       ║
║       ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚══════╝    ╚══════╝ ╚═════╝  ╚═╝╚═════╝      ╚═╝       ║
║                                                                                                                    ║
║                            🔥 Atlassian Confluence RCE Exploitation Framework 🔥                                  ║
║                                                                                                                    ║
╚════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╝
```






**『 Automated OGNL Injection Exploit Tool 』**

[Features](#-features) • 
[Installation](#-installation) • 
[Usage](#-usage) • 
[Technical](#-how-it-works) • 

---



## 🎯 Overview





**CVE-2022-26134** is a Go-based exploitation framework targeting a critical OGNL injection vulnerability in Atlassian Confluence Server/Data Center.

This zero-interaction exploit enables unauthenticated remote code execution through automated payload generation, HTTP delivery, and reverse shell establishment.




```go
┌─────────────────────────────┐
│  Vulnerability Details      │
├─────────────────────────────┤
│  CVE ID: CVE-2022-26134     │
│  CVSS: 9.8 (Critical)       │
│  Type: OGNL Injection       │
│  Auth: Not Required         │
│  Vector: Network            │
└─────────────────────────────┘
```





---

## ✨ Features



```
╭───────────────────────────────────────────────────────────────────────────────╮
│  🎯 Auto IP Detection     │  🚀 One-Command Exploit  │  🔄 Reverse Shell       │
│  📡 HTTP Payload Server   │  🎭 OGNL Injection       │  ⚡ Zero Interaction    │
╰───────────────────────────────────────────────────────────────────────────────╯
```



---

## 🛠️ Installation

### Prerequisites

```bash
┌─[ Requirements ]
│
├── Go 1.16+
├── curl
└── Linux/MacOS
```

### Quick Setup

```bash
# Clone repository
git clone https://github.com/Hghost0x00/CVE-2022-26134-GO.git

# Navigate to directory
cd CVE-2022-26134-GO

# Build binary
go build -o cve-2022-26134 main.go

# Set permissions
chmod +x cve-2022-26134
```

---

## 🚀 Usage

### Launch Exploit

```bash
./cve-2022-26134
```

### Interactive Prompts

```
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃  Configuration                                     ┃
┣━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃  [*] Detected IP: 192.168.1.100                    ┃
┃                                                    ┃
┃  [+] Enter Target IP: _______________              ┃
┃  [+] Enter Port: ____                              ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛
```

### Exploitation Flow

```
[1] 📝 Payload Generation
    └─> shell.sh created

[2] 🌐 HTTP Server
    └─> Listening on :8000

[3] 🔊 Reverse Listener
    └─> Awaiting on :4444

[4] 💉 OGNL Injection
    ├─> Download shell script
    ├─> Set permissions
    └─> Execute payload

[5] 🎊 Shell Established
    └─> Connection from 192.168.1.50
```

---

## 🔬 Technical Details

### Exploitation Chain





**Phase 1: Reconnaissance**
- Auto-detect attacker IP
- Configure listening ports




**Phase 2: Payload Delivery**
- Generate bash reverse shell
- Serve via HTTP (port 8000)
- Open TCP listener (port 4444)




**Phase 3: Exploitation**
- OGNL expression injection
- Download to `/tmp/s.sh`
- Execute with elevated perms





### Vulnerable Versions

```
┌─────────────────────────────────────────────┐
│  Version Range        │  Status             │
├─────────────────────────────────────────────┤
│  

```
╔══════════════════════════════════════════════════════════╗
║                                                          ║
         📺  COMING SOON: Full Walkthrough Video           
                                                          
      Learn to build CVE automation tools from scratch:     
     • Payload generation techniques                       
     • Exploitation logic design                           
     • End-to-end attack chain automation                  
║                                                          ║
╚══════════════════════════════════════════════════════════╝
```

**Subscribe for updates:** [youtube.com/@Hghost010](https://www.youtube.com/@Hghost010)



---

## 📜 License



**MIT License** • See [LICENSE](LICENSE) for full details



---

## 👨‍💻 Author



**Hghost010**

[![GitHub](https://img.shields.io/badge/GitHub-Hghost0x00-181717?style=for-the-badge&logo=github)](https://github.com/Hghost0x00)
[![Twitter](https://img.shields.io/badge/Twitter-@Hghost010-1DA1F2?style=for-the-badge&logo=twitter)](https://x.com/Hghost010)



---

## 🤝 Contributing



Contributions, issues, and feature requests are welcome!

**[Report Issues](https://github.com/Hghost0x00/CVE-2020-0618-GO/issues)** • **[Submit PRs](https://github.com/Hghost0x00/CVE-2020-0618-GO/pulls)** • **[Discussions](https://github.com/Hghost0x00/CVE-2020-0618-GO/discussions)**



---



```
╔═══════════════════════════════════════════════════════════════════╗
║                                                                   ║
║         ⭐ Star this repo if you found it useful! ⭐             ║
║                                                                   ║
║              Made with 💀 for the security community              ║
║                                                                   ║
╚═══════════════════════════════════════════════════════════════════╝
```

**© 2025 Hghost010 • Built for Security Researchers**