CVE-2019-17080

This exploit leverages an object injection vulnerability in mintinstall (Software Manager) by writing a malicious payload to a cache file, which executes arbitrary commands when mintinstall is launched. The payload initiates a reverse shell via netcat.

This repository contains a functional exploit for CVE-2019-17080, leveraging insecure deserialization in Linux Mint's software manager (mintinstall) via a malicious pickle payload. The exploit writes a crafted payload to the reviews.cache file, which executes arbitrary code when mintinstall deserializes it.

This repository contains a functional exploit for CVE-2019-17080, leveraging insecure deserialization in Linux Mint's software manager (mintinstall) via a malicious pickle payload. The exploit writes a reverse shell payload to the reviews.cache file, which is then executed when the software manager deserializes the file.