Description
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Greenshot .NET Deserialization Fileformat Exploit
exploit/windows/fileformat/greenshot_deserialize_cve_2023_34634
Exploit-DB 1
- GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution EDB-51633 · local · Jul 28, 2023
GitHub 2 repositories
-
radman404/CVE-2023-34634 ★ 2 · Aug 18, 2023
Python rewrite of the POC for CVE-2023-34634
-
LBVDSEC/GreenshotShell-CVE-2023-34634 ★ 0 · Nov 2, 2026
Command execution (shell) through CVE-2023-34634.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://greenshot.atlassian.net/browse/BUG-3061
- https://github.com/greenshot/greenshot/commit/a152e2883fca7f78051b3bd6b1e5cc57355cb44c
- https://www.exploit-db.com/exploits/51633
- http://packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.html
- http://packetstormsecurity.com/files/174222/Greenshot-1.3.274-Deserialization-Command-Execution.html