今天看啥  ›  专栏  ›  赛博少女

CVE-2022-39197 Cobalt Strike < 4.7.1 RCE Analyze

赛博少女  · 公众号  ·  · 2022-09-27 15:07
https://mp.weixin.qq.com/s/l5e2p_WtYSCYYhYE0lzRdQ漂亮鼠,公众号:赛博回忆录最新CS RCE曲折的复现路0x00 PrefaceJust a few days ago, BeichenDream submitted an RCE vulnerability to the CS official. Through this vulnerability, the data containing xss can be sent to the teamserver after capturing the attacker's beacon. After reflection, RCE is finally executed on the attacker's client. , the vulnerability number is CVE-2022-39197. It can be seen that this is an unpredictable anti-hacker magic hole, Anfuzi's nightmare. Since it was a loophole in beating jb boy, it must be reproduced, so I made up my mind to burn the essence of life, and finally stumbled and completely reproduced the loophole with the strong support of friends, especially Master Panda. Looking back at the past few days, I really learned a carload of things. You are also welcome to join the Cyber Memoir Knowledge Planet . I will continue to update my src automatic scanning transformation in the futu ………………………………

原文地址:访问原文地址
快照地址: 访问文章快照