CVE-2021-22204

This exploit leverages CVE-2021-22204 in ExifTool to achieve arbitrary code execution by embedding a malicious DjVu file within a JPEG image. The payload is executed when ExifTool parses the crafted image.

This repository contains a functional Python exploit for CVE-2021-22204, which leverages a command injection vulnerability in ExifTool via maliciously crafted metadata in an image file. The exploit generates a malicious image that, when processed by a vulnerable ExifTool instance, executes a reverse shell payload.

This repository contains a functional exploit for CVE-2021-22204, which targets ExifTool versions 7.44 to 12.23. The exploit generates a malicious JPEG image with embedded DjVu metadata to achieve arbitrary code execution when parsed by a vulnerable ExifTool instance.

This repository contains a functional exploit for CVE-2021-22204, which leverages improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up to achieve arbitrary code execution. The script generates a malicious DjVu file embedded within a JPEG, which executes Perl code when parsed by a vulnerable ExifTool instance.

This repository contains a functional exploit for CVE-2021-22204, a vulnerability in ExifTool. The script crafts a malicious DjVu file that, when processed by ExifTool, executes arbitrary commands.

This repository contains a functional Perl script that generates a malicious DjVu image file exploiting CVE-2021-22204 in ExifTool. The script injects arbitrary commands into the image metadata, which are executed when processed by a vulnerable ExifTool instance.

This repository contains a functional exploit for CVE-2021-22204, which targets ExifTool to achieve arbitrary code execution via a crafted JPEG image payload. The exploit generates a malicious image that, when processed by a vulnerable ExifTool version, executes a provided command or reverse shell.

This repository provides a detailed technical analysis of CVE-2021-22204, an ExifTool remote code execution vulnerability. It includes a step-by-step breakdown of the exploit process, Perl code analysis, and explanations of the DjVu file format manipulation required to trigger the vulnerability.

This repository contains a functional exploit for CVE-2021-22204, a remote code execution vulnerability in ExifTool. The exploit creates a malicious DJVU file that, when processed by ExifTool, executes a reverse shell to an attacker-controlled IP.

This repository contains a functional exploit for CVE-2021-22204, leveraging a vulnerability in ExifTool's DjVu module to achieve remote code execution (RCE) on GitLab instances prior to version 13.10.3. The exploit crafts a malicious JPEG file using djvumake and uploads it to trigger command execution.

This repository contains a functional exploit for CVE-2021-22204, an arbitrary code execution vulnerability in ExifTool versions 7.44 through 12.23. The exploit generates a malicious DjVu file that, when processed by a vulnerable ExifTool instance, executes attacker-controlled Perl code.

This repository contains a functional exploit for CVE-2021-22204, an arbitrary code execution vulnerability in ExifTool versions 7.44 to 12.23. The exploit generates a malicious DjVu file that, when processed by a vulnerable ExifTool version, executes attacker-controlled code via a Perl payload embedded in the file's metadata.

This repository contains a functional exploit for CVE-2021-22204, an arbitrary command execution vulnerability in ExifTool. The exploit generates a malicious image file that, when processed by ExifTool, executes a reverse shell payload.

This repository contains a functional exploit for CVE-2021-22204, which leverages improper sanitization in ExifTool to achieve arbitrary code execution via a malicious DjVu file embedded in an image. The script automates the creation of a malicious image file that triggers the vulnerability when processed by ExifTool.

This repository contains a functional exploit for CVE-2021-22204, which leverages an unsafe eval in ExifTool's DjVu module to achieve remote code execution. The exploit involves hosting a malicious image file and tricking the vulnerable application into processing it, leading to arbitrary command execution.

This repository contains a functional exploit for CVE-2021-22204, leveraging a vulnerability in ExifTool to execute arbitrary code via crafted DjVu files. The Dockerfile automates the setup of the environment and generates malicious DjVu files with embedded payloads.

This Metasploit module exploits an unauthenticated file upload and command injection vulnerability in GitLab (CVE-2021-22204) by leveraging a malicious JPEG file with embedded ExifTool commands. It achieves remote code execution as the 'git' user on vulnerable GitLab instances.

The repository contains a Python script designed to embed reverse shell payloads into images, exploiting text recognition vulnerabilities. It includes functionality to generate images with payloads and supports base64 encoding, font customization, and fuzzing for OCR evasion.

This repository contains a functional Python exploit for CVE-2021-22204, a vulnerability in ExifTool. The exploit generates a malicious image file (image.jpg) that triggers arbitrary code execution when processed by a vulnerable version of ExifTool.

This repository contains a functional exploit for CVE-2021-22204, an RCE vulnerability in ExifTool. The exploit crafts a malicious DjVu file with embedded Perl code to achieve remote command execution when processed by a vulnerable ExifTool instance.

This Metasploit module exploits a Perl injection vulnerability in ExifTool (CVE-2021-22204) by embedding malicious DjVu ANT metadata in image files (JPEG, TIFF, or DjVu). The payload executes arbitrary commands via Perl backticks when the file is processed by ExifTool.