How l00ph0le/cve-2019-0604 works
This is a small command-line proof of concept for constructing a SharePoint entity-instance identifier from a file’s contents. The user supplies a file path; Main builds a payload, passes it to SharePoint’s encoder, and prints the encoded value. The payload uses a XAML reader wrapped in an ObjectDataProvider. The README identifies the CVE context, but the available source does not show a vulnerable SharePoint server interaction or exploit execution.
Main entry points: Program.cs CLI entry
Components 6
Other components
- User
- CLI entry
ConsoleApplication1/ConsoleApplication1/Program.cs - Payload builder
ConsoleApplication1/ConsoleApplication1/Program.cs - Payload file
- SharePoint encoder
- Console output
Connections 5
- User → CLI entry: supplies arguments
ConsoleApplication1/ConsoleApplication1/Program.cs - CLI entry → Payload builder: calls
ConsoleApplication1/ConsoleApplication1/Program.cs - Payload builder → Payload file: reads contents
ConsoleApplication1/ConsoleApplication1/Program.cs - CLI entry → SharePoint encoder: encodes payload
ConsoleApplication1/ConsoleApplication1/Program.cs - CLI entry → Console output: prints result
ConsoleApplication1/ConsoleApplication1/Program.cs