b4ny4n / CVE-2020-13151

POC for CVE-2020-13151

CVE-2020-13151 POC

Aerospike Database (< 5.1.0.3) Host Command Execution

Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html

• poc.lua shows manual exploitation of the server

• cve2020-13151.py for automated exploitation

• run-poc.sh sets up a docker environment for local experimentation