CVE-2024-415770-SSRF-RCE

Description

This script is designed to interact with the teamserver. Update the script with your teamserver URL. It performs several steps to register an agent, open a socket, and inject an SSH key into the target's authorized keys.

Prerequisites

• Python 3.x
• Required Python packages:
  • requests
  • urllib3
  • pycryptodome

Installation

1. Install the required Python packages:

   root@kitploit:~

   python3 -m venv myenv
   source myenv/bin/activate
   pip install requests urllib3 pycryptodome
   

2. Clone the repository:

   root@kitploit:~

   git clone https://github.com/muhmad-umair/CVE-2024-415770-ssrf-rce.git
   cd CVE-2024-415770-ssrf-rce
   
   
   

3. Run the script:

   root@kitploit:~

   python exploit.py
   

4. login to ssh:

   root@kitploit:~

   ssh -i key user@ip