CVE-2020-15227

This exploit targets CVE-2020-15227, a code injection vulnerability in Nette Framework's `nette.micro` component. It achieves RCE by injecting a reverse shell command via the `callback` parameter, establishing a TCP connection back to the attacker.

This repository contains a Python-based proof-of-concept exploit for CVE-2020-15227, which targets a potential remote code execution vulnerability in Nette Framework applications. The exploit tests for vulnerabilities in file writing functions and shell execution by generating unique checksums and verifying their presence in server responses.

This repository contains a functional exploit and autofixer for CVE-2020-15227, a code injection vulnerability in Nette Framework's nette.micro component. The exploit achieves RCE via a reverse shell, while the autofixer attempts to patch the vulnerability by updating Composer dependencies.