Git LFS (git-lfs) - Remote Code Execution (RCE) exploit CVE-2020-27955 - Clone to Pwn

Posted by Dawid Golunski on Nov 05

/*
Go PoC exploit for git-lfs – Remote Code Execution (RCE)
vulnerability CVE-2020-27955
git-lfs-RCE-exploit-CVE-2020-27955.go

Discovered by Dawid Golunski
https://legalhackers.com
https://exploitbox.io

Affected (RCE exploit):
Git / GitHub CLI / GitHub Desktop / Visual Studio / GitKraken /
SmartGit / SourceTree etc.
Basically the whole Windows dev world which uses git.

Usage:
Compile: go build…

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Original Source

Tags: cyber, exploit, full disclosure, OSINT, seclist, Security, threatintel, vulnerabilities, vulnerability, vulns

Git LFS (git-lfs) – Remote Code Execution (RCE) exploit CVE-2020-27955 – Clone to Pwn

Original Source

Cobalt Strike Beacon Detected – 117[.]50[.]163[.]22:8080

Cobalt Strike Beacon Detected – 93[.]179[.]101[.]17:80

Cobalt Strike Beacon Detected – 123[.]57[.]230[.]183:443

Cobalt Strike Beacon Detected – 101[.]133[.]224[.]88:443

Cobalt Strike Beacon Detected – 47[.]109[.]58[.]47:80

Original Source

You may have missed

Cobalt Strike Beacon Detected – 117[.]50[.]163[.]22:8080

Cobalt Strike Beacon Detected – 93[.]179[.]101[.]17:80

Cobalt Strike Beacon Detected – 123[.]57[.]230[.]183:443

Cobalt Strike Beacon Detected – 101[.]133[.]224[.]88:443

Cobalt Strike Beacon Detected – 47[.]109[.]58[.]47:80