Mass exploitation of Sitecore RCE vulnerability | CVE-2023-35813 | POC | RCE

Описание

In this video, we will see mass exploitation of Sitecore remote code execution vulnerability (CVE-2023-35813).

Shodan Dork : title:"Sitecore"

To download the results we will use below command ( Note: Shodan Premium API Key is needed to download the results)

shodan download --limit -1 sitecore 'title:"Sitecore"'

I already downloaded the results using shodan cli command

We will seperate the IP:PORT from shodan results using shodan parse command along with awk

shodan parse sitecore.json.gz --fields ip_str,port --separator " " | awk '{print $1":"$2}' | tee -a sitecore-ip.txt

cat sitecore-ip.txt | httpx -silent | tee -a urls.txt

We will using below process to automate the findings

cat urls.txt | nuclei -t CVE-2023-35813.yaml | tee nuclei.txt

Check the Vulnerable URL

Need Better Machine to Hack? Setup your own VPS today!
Get $100 credit on Digital Ocean using this link
https://m.do.co/c/551f689486b2

⏩ If you like the Video then please like , share and subscribe to channel

⏩ Follow us on Social Media
Twitter : https://twitter.com/simrotion13

Thanks For Watching?

#bugbounty #sitecore #cve2023 #rce

Everything is Just for Educational Purpose