CVE-2017-8291

This repository contains a working PoC for CVE-2017-8291, demonstrating remote command execution via Python PIL/Pillow's handling of EPS files through GhostScript. The Flask app allows file uploads with extension checks bypassed by exploiting file header detection.

This repository contains a working PoC for CVE-2017-8291, demonstrating RCE in Python PIL/Pillow via GhostScript's EPS processing. The Flask app allows uploading a malicious EPS file disguised as a PNG, exploiting the GhostButt vulnerability to execute arbitrary commands.

This repository contains a working PoC for CVE-2017-8291, demonstrating an RCE vulnerability in Python Imaging Library (PIL) due to improper file type handling. The exploit leverages GhostScript command injection via a maliciously crafted EPS file disguised as a PNG.

This repository contains a working PoC for CVE-2017-8291, exploiting a remote command execution vulnerability in Python's PIL (Pillow) module via GhostScript's sandbox bypass. The Flask app demonstrates the vulnerability by allowing EPS files disguised as PNGs to execute arbitrary commands.

This Metasploit module exploits a type confusion vulnerability in Ghostscript (CVE-2017-8291) to achieve arbitrary command execution. It generates a malicious EPS file that, when processed by Ghostscript, executes the embedded payload.

This Metasploit module exploits a type confusion vulnerability in Ghostscript (CVE-2017-8291) to achieve arbitrary command execution. It generates a malicious EPS file that triggers the vulnerability when processed by Ghostscript.