CVE-2023-25157-checker

A script, written in golang. POC for CVE-2023-25157

Steps to use

1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git
2. cd CVE-2023-25157-checker
3. go run CVE-2023-25157.go <URL> *Replace <URL> with the URL of the target server.

Google Dork

inurl:"/geoserver/ows?service=wfs"

Research

For research purpose, you can setup and deploy your own instance of geoserver. This docker can be easily setup in a blink of an eye *multiple blink

References

• Github Advisory
• Commit
• Tweet
• NVD

Legal Disclaimer

This POC Script was intended for educational and research purposes only. The main purpose was for me to code in golang. Usage of this script for any unauthorized activities, and unethical testing is STRICTLY prohibited.

Stargazers over time