New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[add-request] Adding werzeug /console rce #11

Open

wlayzz opened this issue Jun 26, 2022 · 0 comments

Assignees

Labels

add-request framework

Contributor

wlayzz commented Jun 26, 2022

If Werkzeug console is enabled rce is possible on host, sometimes the werkzeug is protecting by a PIN code that can be reconstructed.
Ressources:
https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/werkzeug
https://github.com/wdahlenburg/werkzeug-debug-console-bypass

p0dalirius self-assigned this

p0dalirius added the add-request label

p0dalirius changed the title ~~Improvement: Adding werzeug rce~~ [Enhancement]: Adding werzeug rce

p0dalirius added the framework label

p0dalirius changed the title ~~[Enhancement]: Adding werzeug rce~~ [add-request] Adding werzeug /console rce

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment