Skip to content

[add-request] Adding werzeug /console rce #11

Description

@wlayzz

If Werkzeug console is enabled rce is possible on host, sometimes the werkzeug is protecting by a PIN code that can be reconstructed.
Ressources:
https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/werkzeug
https://github.com/wdahlenburg/werkzeug-debug-console-bypass

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions