• Stars
    star
    498
  • Rank 88,494 (Top 2 %)
  • Language
    Shell
  • Created over 8 years ago
  • Updated over 8 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Proof of Concepts for CVE-2016–3714

ImageTragick POCs

How To Use

git clone https://github.com/ImageTragick/PoCs.git
cd PoCs
./test.sh

To test a policy.xml file place it in the script directory and run test.sh.

Safe Output

user@host:~/code/PoCs$ ./test.sh 
testing read
SAFE

testing delete
SAFE

testing http with local port: 38663
SAFE

testing http with nonce: a7DyBeV7
SAFE

testing rce1
SAFE

testing rce2
SAFE

testing MSL
SAFE

Unsafe Output

user@host:~/code/PoCs$ ./test.sh 
testing read
UNSAFE

testing delete
UNSAFE

testing http with local port: 44755
UNSAFE

testing http with nonce: a7DvBer2
UNSAFE

testing rce1
UNSAFE

testing rce2
UNSAFE

testing MSL
UNSAFE