convisolabs/cve-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

CVE-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool.

About the vulnerability

The CVE-2021-22204 was discovered and reported by William Bowling. (@wcbowling)

This exploit was made by studying the exiftool patch after the CVE was already reported.

Pre-requisites

Installed exiftool and djvulibre tools. If you are on Debian or ubuntu you can install with:

sudo apt install djvulibre-bin exiftool

How to run:

Change the IP and Port in the exploit.py file. You can test the reverse shell with

nc -nvlp 9090  # or the port you specify in the exploit.py file

Then:

python3 exploit.py

And the image.jpg will trigger the vulnerability when opened with a vulnerable exiftool.

If you want to practice, there is a small lab here.

cve-2021-22204-exiftool's Issues

Getting below error

I executed script on both windows and linux servers. Keep getting below error and exit the script before creating image file. highly apricate support here.

Linux error:
Traceback (most recent call last):
File "/home/sandun/Desktop/exp2.py", line 22, in
subprocess.run(['bzz', 'payload', 'payload.bzz'])
File "/usr/lib/python3.9/subprocess.py", line 505, in run
with Popen(*popenargs, **kwargs) as process:
File "/usr/lib/python3.9/subprocess.py", line 951, in init
self._execute_child(args, executable, preexec_fn, close_fds,
File "/usr/lib/python3.9/subprocess.py", line 1821, in _execute_child
raise child_exception_type(errno_num, err_msg, err_filename)
FileNotFoundError: [Errno 2] No such file or directory: 'bzz'

Server Error When running lab

http://localhost/?endpoint=https://www.cpan.org/misc/images/cpan.png