CVE-2019-17080

This repository contains a functional exploit for CVE-2019-17080, leveraging insecure deserialization in Linux Mint's software manager (mintinstall) via a malicious pickle payload. The exploit writes a crafted payload to the reviews.cache file, which executes arbitrary code when mintinstall deserializes it.

This repository contains a functional exploit for CVE-2019-17080, leveraging insecure deserialization in Linux Mint's software manager (mintinstall) via a malicious pickle payload. The exploit writes a reverse shell payload to the reviews.cache file, which is then executed when the software manager deserializes the file.

This exploit leverages an object injection vulnerability in mintinstall (Software Manager) by writing a malicious payload to a cache file, which executes arbitrary commands when mintinstall is launched. The payload initiates a reverse shell via netcat.