CVE-2021-31762 Webmin CSRF漏洞

From PwnWiki
Revision as of 16:27, 25 April 2021 by Pwnwiki (talk | contribs) (Created page with "==簡介== 利用CSRF攻擊,通過Webmin的添加用戶功能創建特權用戶,然後通過特權用戶權限反彈shell。 ==EXP== https://github.com/electronicbots/CVE...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

簡介

利用CSRF攻擊,通過Webmin的添加用戶功能創建特權用戶,然後通過特權用戶權限反彈shell。