0dinox/cve-2024-415770-ssrf-rceAutomated exploit for CVE-2024-415770: leverages SSRF to achieve RCE, registers an agent on the teamserver, opens a socket, and injects an SSH key for persistent remote access.
This script is designed to interact with the teamserver. Update the script with your teamserver URL. It performs several steps to register an agent, open a socket, and inject an SSH key into the target's authorized keys.
requestsurllib3pycryptodomeInstall the required Python packages:
python3 -m venv myenv
source myenv/bin/activate
pip install requests urllib3 pycryptodome
Clone the repository:
git clone https://github.com/muhmad-umair/CVE-2024-415770-ssrf-rce.git
cd CVE-2024-415770-ssrf-rce
Run the script:
python exploit.py
login to ssh:
ssh -i key user@ip