GAE-RCE

by ezequielpereira

ezequielpereira / GAE-RCE

Google App Engine - Remote Code Execution bug ($36k bug bounty)

134 Stars 20 Forks Last release: Not found 5 Commits 0 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

GAE-RCE

Google App Engine - Remote Code Execution bug ($36k bug bounty): https://sites.google.com/site/testsitehacking/-36k-google-app-engine-rce

  • app - Example application hosted in http://save-the-expanse.appspot.com/
    • /args - Returns all command-line arguments passed to the Java launcher
    • /nmap - Performs a scan of all ports in 169.254.169.253 (Binary taken from here)
    • /grpc - Runs the gRPC C++ client
  • gRPC_client - Source code of the gRPC C++ client
  • protos - All Protocol Buffer definitions extracted from Google App Engine

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.