3 Videos for Gogs RCE

In this video, we explore the CVE-2018-18925 vulnerability as part of the green badge exercise. We delve into the basics of session management, different session storage mechanisms, and how a directory traversal vulnerability in Gogs can be exploited.

In this video, we explore the exploitation of CVE-2018-18925, focusing on issues with session IDs and session file forgery in Gogs. We set up a vulnerable Docker container, configure the service, and extract a valid session for further testing.

In this video, we cover the exploitation of CVE-2018-18925 as part of the Green Badge. We demonstrate how to leverage a directory traversal vulnerability in Gogs to escalate our privileges to an administrator level.