/cve-2022-36804

A simple PoC for Atlassian Bitbucket RCE [CVE-2022-36804]

Primary LanguagePython

Atlassian Bitbucket RCE PoC - CVE-2022-36804

This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands:

echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py

Or you can create a targets file from another tools like (subfinder, sublist3r or go-dork etc.)

cat targets.txt |  python3 cve-2022-36804.py 

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36804
https://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html