Exploit for CVE-2021-3129

githubexploit · 2021-07-22

Description

Vulnerability in Facade Ignition, laravel-CVE-2021-3129-EXP, getshell exploi

Entry point

Parametersolution · request body

Path/_ignition/execute-solution

Unauthenticated remote code execution via Ignition execute-solution endpoint (CVE-2021-3129).

Affected Facade Ignition versions

Facade Ignition< 2.5.2

All known vulnerabilities by product

Ignition Laravel

CVSS 9.8 for CVE-2021-3129

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

98%confidence this exploit runs

Based on 5 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-06-16

CVE Information

Exploit Details

Modified:2024-08-12 20:14

Last Seen:2025-08-31 21:03

Reporter:1111one

Written in:Python

Last commit:2021-07-22

Tags

vulnerabilityfacade ignitionlaravelCVE-2021-3129getshellexploit

Other exploits for CVE-2021-3129

Exploit for CVE-2021-3129

2026-08-07 GiangdurianGITHUB

Exploit for CVE-2021-3129

2026-02-12 Nullsecur1tyGITHUB

Exploit for CVE-2021-3129

2026-01-30 crypt0lithGITHUB

Exploit for CVE-2021-3129

2024-09-29 0x0d3adGITHUB

Exploit for CVE-2021-3129

2024-05-19 cc3305GITHUB

Exploit for CVE-2021-3129

2024-01-15 AxiankeGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit Code

README11 lines

## https://sploitus.com/exploit?id=B4031542-31ED-5A0E-934F-8523687B36BF
# laravel-CVE-2021-3129-EXP

CVE-2021-3129: One-click getshell vulnerability

## Usage
python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000

![image-20210125164753363](README.assets/image-20210125164753363.png)

After successful execution, use the Godzilla link to proceed.