CVE-2020-10199

This exploit leverages a Java EL injection vulnerability in Sonatype Nexus Repository Manager 3.21.1 and below to achieve remote code execution. It authenticates as an admin user and sends a maliciously crafted payload to execute arbitrary commands via the `/service/rest/beta/repositories/go/group` endpoint.

This Metasploit module exploits a Java EL injection vulnerability in Nexus Repository Manager to achieve remote code execution. It authenticates with provided credentials, crafts a malicious EL payload, and executes arbitrary commands via a command stager.

This repository contains a working exploit for CVE-2020-10199, a remote command execution vulnerability in Nexus Repository Manager 3.x. The exploit leverages deserialization via BCEL (Byte Code Engineering Library) to execute arbitrary commands on the target system.

This repository provides proof-of-concept exploits for CVE-2020-10199, CVE-2020-10204, and CVE-2020-11444 in Nexus Repository Manager 3. It includes command injection payloads for RCE and details on privilege escalation and authentication bypass vulnerabilities.

This PoC exploits CVE-2020-10199, a remote code execution vulnerability in Sonatype Nexus Repository Manager 3. The exploit leverages a deserialization flaw via BCEL (Byte Code Engineering Library) to execute arbitrary commands on the target system.

This repository contains a Java-based GUI tool for detecting CVE-2020-10199 and CVE-2020-10204 vulnerabilities in Sonatype Nexus Repository Manager. It requires authenticated access and uses randomized payloads for stability.

This PoC demonstrates CVE-2020-10199 and CVE-2020-10204, which are EL injection vulnerabilities in Sonatype Nexus Repository Manager. The script checks for the presence of these vulnerabilities by injecting a test string and verifying its reflection in the response.

This repository provides a working proof-of-concept exploit for CVE-2020-10199, targeting Sonatype Nexus Repository Manager OSS 3.20.1-01. It demonstrates remote code execution via Java EL injection and includes a BCEL payload to bypass security restrictions, ultimately achieving a reverse shell.

This exploit leverages an authenticated remote code execution vulnerability in Sonatype Nexus 3.21.01 by injecting a malicious expression into the repository configuration, which executes arbitrary commands via Java Runtime.

This Metasploit module exploits a Java EL injection vulnerability in Nexus Repository Manager to achieve remote code execution. It authenticates with provided credentials, crafts a malicious EL payload, and executes arbitrary commands via a command stager.