[cholle_bhature]

I recently found out a fairly big website with it's dev mode on. The website is using Laravel version 6.20.7 and PHP version 7.2.34-18+ubuntu18.04.1+deb.sury.org+1 and Laravel config cached is set to false. I can see the stacktrace powered by Ignition.
This is all I know about the configs right now.

I have tried the laravel debug rce CVE-2021-3129 with no luck as the log file path must be different.

Does anybody know any other exploit that might work?

[marcus08]

I recently found out a fairly big website with it's dev mode on. The website is using Laravel version 6.20.7 and PHP version 7.2.34-18+ubuntu18.04.1+deb.sury.org+1 and Laravel config cached is set to false. I can see the stacktrace powered by Ignition.
This is all I know about the configs right now.

I have tried the laravel debug rce CVE-2021-3129 with no luck as the log file path must be different.

Does anybody know any other exploit that might work?

You have to be careful when you chose your exploit code for CVE-2021-3129. Also, finding log file name and path is extremely important. Many of them are buggy. I may help you with it. PM me.