CVE-2018-18925

Gogs_RCE 漏洞复现 0x01 前台注册普通账号 0x02 go 编译伪造管理员session go run maingo package main import ( "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" ) func EncodeGob(obj map[interface{}]interface{}) ([]byte, error) { for _, v := range obj { gobRegister(v) }

Exploitation of CVE-2018-18925 a Remote Code Execution against the Git self hosted tool: Gogs.

CVE-2018-18925 Exploitation of CVE-2018-18925 a Remote Code Execution against the Git self hosted tool: Gogs Gogs is based on the Macaron framework The system used to manage session is very similar to what PHP does The session identifier in the cookie is mapped to a file on the file system When the web server receives a request with a session identifier (as a cookie), it lo

Gogs CVEs

GogsOwnz GogsOwnz is a simple script to gain administrator rights and RCE on a Gogs/Gitea server Exploit vulnerabilities in Gogs/Gitea, including CVE-2018-18925, CVE-2018-20303 Legal Disclaimer This script is offered as is No warranty, use on your own, please obey the law Typical Usage - [Please, read the full usage] Get info about Gogs/Gitea running python3 gogsownzpy htt