CVE-2024-4577 nuclei-templates
Nuclei YAML template for CVE-2024-4577, a Windows PHP-CGI argument injection vulnerability enabling unauthenticated RCE in affected PHP and XAMPP setups.
POC & $BASH script for CVE-2024-4577
CTF challenge demonstrating CVE-2024-4577 PHP CGI argument injection, with vulnerable app, attack scripts, and Kubernetes/Docker deployment for hands-on exploitation practice.
CVE-2024-4577
Demonstrates exploitation of CVE-2024-4577, a PHP CGI RCE on Windows, including attack steps, reverse shell deployment, and ransomware simulation with log analysis.
Create lab for CVE-2024-4577
Exploit for CVE-2024-4577 PHP-CGI RCE on Windows, with WAF bypass and SSRF support. Provides multiple exploit variants for default, WAF, and SSRF scenarios.
ATTACK PoC - PHP CVE-2024-4577
This is a PoC for PHP CVE-2024-4577.
CVE-2024-4577 RCE PoC
Python-based exploit for CVE-2024-4577, a PHP-CGI remote code execution vulnerability on Windows platforms with Best-Fit character conversion bypass.
Exploit for PHP CGI Argument Injection (CVE-2024-4577) enabling remote code execution on vulnerable Windows servers running Apache and PHP-CGI. Includes scanning, exploitation, and reverse shell payload delivery.
PHP CGI Parameter Injection Vulnerability (RCE: Remote Code Execution)
Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)
Automated PHP remote code execution scanner for CVE-2024-4577
Python-based exploit for CVE-2024-4577 PHP argument injection vulnerability with single-target and batch scanning capabilities.
Shell script to scan domains for CVE-2024-4577 PHP remote code execution vulnerability via crafted POST requests, exporting vulnerable targets for manual verification.
Nuclei template for detecting CVE-2024-4577 PHP CGI argument injection vulnerability, enabling automated RCE testing via crafted HTTP requests and response matching.
Python exploit for CVE-2024-4577 PHP CGI argument injection enabling unauthenticated remote code execution on Windows servers with specific locales.
A Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI.
Docker-based CTF lab demonstrating CVE-2024-4577 PHP-CGI argument injection leading to RCE. Includes vulnerable PHP 5.4.1 CGI, exploit scripts, and flag retrieval.
Python PoC script to test for CVE-2024-4577 PHP CGI vulnerability via query-string injection and POST payload, determining server susceptibility.
PoC - PHP CGI Argument Injection CVE-2024-4577 (Scanner and Exploit)
Scanner and exploit for CVE-2024-4577 PHP CGI argument injection vulnerability. Detects susceptible PHP applications and executes arbitrary code via customizable payloads for authorized security testing.
Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers
Proof Of Concept RCE exploit for critical vulnerability in PHP <8.2.15 (Windows), allowing attackers to execute arbitrary commands.
Proof-of-concept exploit for PHP CGI argument injection (CVE-2024-4577) enabling remote code execution on vulnerable Windows servers with scanning and reverse shell capabilities.
Scanner and exploit tool for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution on Windows systems. Includes detection and command execution modules.
CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction
Fixed and minimalist PoC of the CVE-2024-4577
CVE-2024-4577 is a critical vulnerability in PHP affecting CGI configurations, allowing attackers to execute arbitrary commands via crafted URL parameters.
使用PowsrShell掃描CVE-2024-4577
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
Proof-of-concept exploit for CVE-2024-4577 enabling remote code execution in vulnerable PHP versions 8.1-8.3. Includes customizable arguments for targeted testing.
[Vulnerability Reproduction] World's first exploit for CVE-2024-4577 PHP-CGI RCE vulnerability using the default PHP environment (XAMPP).
PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template
CVE-2024-4577 Exploit POC
Batch RCE exploit for CVE-2024-4577 targeting PHP CGI on Windows, with configurable command, file read, and thread settings.
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
CVE-2024-4577 Exploits
CVE-2024-4577 Mass Scanner & Exploit Tool
Proof-of-concept exploit for CVE-2024-4577 with Shodan integration for automated discovery of vulnerable targets on the internet.
Python proof-of-concept exploit for CVE-2024-4577, supporting single-target and batch vulnerability detection for security testing.
Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability, enabling remote code execution and shell access on vulnerable targets.
Exploit script for CVE-2024-4577, an argument injection vulnerability in PHP. Scans single or multiple targets to execute arbitrary PHP code via crafted requests.
Investigation of CVE-2024-4577 exploitation and AsyncRAT deployment with DFIR artifacts, IoCs, and detection guidance.
Exploit tool for CVE-2024-4577 (PHP-CGI) enabling remote command execution with batch scanning, proxy support, and multi-threaded target processing.
Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.
批量验证POC和EXP
一個測試CVE-2024-4577和CVE-2024-8926的安全滲透工具
CVE-2024-4577
Exploit for CVE-2024-4577, providing proof-of-concept code to demonstrate and test the vulnerability in affected systems.
CVE-2024-4577
Exploit for php-cgi
PHP CGI CVE-2024-4577 PoC
Nuclei Template for CVE-2024-4577
Proof-of-concept exploit for CVE-2024-4577 targeting XAMPP PHP-CGI with remote code execution via argument injection.
php-cgi-cve-2024-4577
CVE-2024-4577 POC
Nuclei template providing a proof-of-concept for CVE-2024-4577, a PHP CGI argument injection vulnerability, enabling automated detection and testing.
Scanning CVE-2024-4577 vulnerability with a url list.
🚨 New Incident Report Completed! 🚨 Just wrapped up "Event ID 268: SOC292 - Possible PHP Injection Detected (CVE-2024-4577)" on LetsDefend.io. This analysis involved investigating an attempted Command Injection targeting our PHP server. Staying ahead of these threats with continuous monitoring and swift containment! 🛡️
İbrahimsql · php · Jun 15, 2025
