CVE-2020-13151

This exploit leverages CVE-2020-13151 to achieve remote command execution on Aerospike Database versions prior to 5.1.0.3 by registering a malicious UDF (User Defined Function) and executing arbitrary commands via the `apply` method.

This repository contains a functional PoC for CVE-2020-13151, which exploits a command execution vulnerability in Aerospike Database versions prior to 5.1.0.3. The exploit leverages a Lua UDF (User Defined Function) to execute arbitrary commands on the underlying host via `io.popen`.

This repository contains a functional PoC for CVE-2020-13151, an RCE vulnerability in Aerospike Server. The exploit leverages a Lua UDF (User Defined Function) to execute arbitrary commands via `io.popen`, bypassing restrictions on `os.execute()`.

This Metasploit module exploits CVE-2020-13151 in Aerospike Database by uploading a malicious Lua UDF that executes arbitrary commands via `os.execute`. It supports both direct command execution and staged payloads, with cleanup to avoid persistent backdoors.