yapi-rce: Yapi RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Esonhugh/yapi-rce-webshell
• https://gist.github.com/pikpikcu/0145fb71203c8a3ad5c67b8aab47165b
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/YApi-NoSQL%E6%B3%A8%E5%85%A5%E5%AF%BC%E8%87%B4%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://blog.hackall.cn/pentestvuln/761.html
• https://www.gksec.com/YAPI_Mock_RCE.html
• https://blog.csdn.net/YJ_12340/article/details/140828495
• https://github.com/yumusb/Yapi_Rce
• https://zhuanlan.zhihu.com/p/712011115
• https://blog.csdn.net/qq_40684306/article/details/119870500
• https://cn-sec.com/archives/2889945.html

Related Vulnerabilities

• PoCyapi-sql-inject: YApi 接口管理平台 up SQL注入漏洞
• PoCyapi-rce: Yapi - Remote Code Execution
• YApi /login 默认口令漏洞
• Yapi 弱口令漏洞
• YAPI认证用户 远程代码执行
• YaPig 跨站脚本攻击漏洞
• YaPiG 'last_gallery.php'脚本 PHP远程文件包含漏洞
• YaPiG 'BASE_DIR'参数 本地文件任意包含漏洞