Gallopsled/pwntools
GitHub
Releases125
Frequency1 month 6 days
Last Release
Stars13.5K
CTF framework and exploit development library
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 8.1 HIGH | 7.5 HIGH | ||
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution. | |||