CVE-2018-20062

This repository contains a Python script designed to scan for and detect the ThinkPHP 5.0/5.1 RCE vulnerability (CVE-2018-20062) by sending specific payloads to target URLs and checking for PHP info disclosure. It uses multithreading for efficiency and includes basic error handling.

This repository contains a Python-based exploit tool for CVE-2018-20062, targeting ThinkPHP 5.0.23 RCE via the `?s=captcha` parameter. It includes both single-command execution and an interactive Godzilla-like shell with AES encryption.

This PoC exploits CVE-2018-20062, a remote code execution vulnerability in ThinkPHP. It leverages the `captcha` endpoint to inject malicious payloads via the `_method` and `filter[]` parameters, allowing arbitrary command execution.

This Metasploit module exploits PHP injection vulnerabilities in ThinkPHP versions up to 5.0.23 to achieve remote code execution. It includes version detection and supports both direct command execution and staged payloads.

This Metasploit module exploits PHP injection vulnerabilities in ThinkPHP versions up to 5.0.23, allowing remote code execution (RCE) via crafted HTTP requests. It includes version detection and two distinct exploit methods for different ThinkPHP versions.