git
ask
hub
Privacy
Terms
Sign in with GitHub
wupco/gitlab-rce-demo
↗
Stars ·
40
Language ·
Shell
License ·
MIT
Simplify and Visualize This Repo
Scan the safety of this repo
Self Host this repo
Check out more work of Developer: wupco
Ask anything about this repo to start.
Help me understand how the Oj parser vulnerability in GitLab allows an attacker to corrupt memory and get remote command execution. Walk through the attack chain step by step.
I want to run the GitLab RCE demo locally. What are the exact system requirements, and how do the two terminal windows work together to execute the attack?
Explain how ASLR (Address Space Layout Randomization) makes this exploit harder, and how the demo script handles finding the correct memory layout each time.
I have a patched GitLab instance. How can I adapt this proof-of-concept demo to verify the Oj vulnerability is fixed on my system?
Full explanation on explaingit →
📎
Send
By chatting or signing in you agree to the
Terms
and chat-message logging (revocable in
History
).