Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/oppsec/wsob
😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.
https://github.com/oppsec/wsob
cve-2022-29464 exploit python wso2
Last synced: 3 months ago
JSON representation
😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.
- Host: GitHub
- URL: https://github.com/oppsec/wsob
- Owner: oppsec
- License: mit
- Created: 2022-04-24T18:25:26.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2022-07-27T23:14:13.000Z (over 2 years ago)
- Last Synced: 2023-03-03T22:47:52.919Z (almost 2 years ago)
- Topics: cve-2022-29464, exploit, python, wso2
- Language: Python
- Homepage:
- Size: 484 KB
- Stars: 26
- Watchers: 1
- Forks: 11
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# 😭 WSOB (CVE-2022-29464)
___
**😭 WSOB** is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.
## CVE-2022-29464 details:
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 and above through 4.0.0; WSO2 Identity Server 5.2.0 and above through 5.11.0; WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0, and 5.6.0; WSO2 Identity Server as Key Manager 5.3.0 and above through 5.10.0; and WSO2 Enterprise Integrator 6.2.0 and above through 6.6.0.Source: https://nvd.nist.gov/vuln/detail/CVE-2022-29464
## ⚡ Installing / Getting started
A quick guide on how to install and use WSOB
```
1. Clone the repository - git clone https://github.com/oppsec/wsob.git
2. Install the libraries - pip3 install -r requirements.txt
3. Run WSOB2 - python3 main.py -u https://example.com
```
## ⚙️ Pre-requisites
- [Python 3](https://www.python.org/downloads/) installed on your machine.
- Install the libraries with `pip3 install -r requirements.txt`
## 🔨 Contributing
A quick guide of how to contribute with the project.
```
1. Create a fork from WSOB repository
2. Download the project with git clone https://github.com/your/wsob.git
3. Make your changes
4. Commit and make a git push
5. Open a pull request
```
## 🙏 Credits
- Credits to hakivvi for the original webshell code
## ⚠️ Warning
- The developer is not responsible for any malicious use of this tool.