34006133 / CVE-2022-42889

RCE PoC for Apache Commons Text vuln

Quickstart

sudo apt install golang

To run like Python:

go run main.go arg1 arg2

To build executable:

go build main.go

Usage:

non@woa:~/program$ go run main.go 
[-] Usage: ./program vulnerable/web?param= 'ls -la'

---

To Do:

• Reverse shell capabilities (https://gobyexample.com/spawning-processes)
• Better error handling, know there is a logic bug where if you change ?search to ?sea, program flow still reaches command success end line