https://github.com/p0dalirius/cve-2021-43008-adminerread

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability
https://github.com/p0dalirius/cve-2021-43008-adminerread

adminer bugbounty cve cve-2021-43008 exploit file hacking pentest read tool vulnerability

Last synced: about 1 month ago
JSON representation

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

• Host: GitHub
• URL: https://github.com/p0dalirius/cve-2021-43008-adminerread
• Owner: p0dalirius
• License: gpl-2.0
• Created: 2021-12-13T17:26:49.000Z (about 3 years ago)
• Default Branch: master
• Last Pushed: 2024-03-16T08:25:52.000Z (11 months ago)
• Last Synced: 2024-12-18T18:50:11.520Z (about 2 months ago)
• Topics: adminer, bugbounty, cve, cve-2021-43008, exploit, file, hacking, pentest, read, tool, vulnerability
• Language: Python
• Homepage: https://podalirius.net/en/articles/writing-an-exploit-for-adminer-4.6.2-arbitrary-file-read-vulnerability/
• Size: 1.75 MB
• Stars: 79
• Watchers: 3
• Forks: 14
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# CVE-2021-43008 - AdminerRead



    Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability 

    


    

    

    

    




![](./docs/banner.png)

## Installation

```

git clone https://github.com/p0dalirius/AdminerRead

cd AdminerRead

sudo python3 setup.py install

```

## Usage

![](./docs/adminer.gif)

## Vulnerable versions

Adminer version 1.0 up to version 4.6.2 (included) File Read Vulnerability

![](./docs/vulnerable_versions.gif)

 ➡️ More detailed information about impacted versions in ![Vulnerable versions](./docs/Vulnerable_versions.md)

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

## References

 - http://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability

 - https://podalirius.net/en/articles/writing-an-exploit-for-adminer-4.6.2-arbitrary-file-read-vulnerability/