SQLPad RCE Exploit

This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution (RCE) via the /api/test-connection endpoint.

Overview

The provided script (exploit.py) demonstrates how to exploit the RCE vulnerability in SQLPad. The script sends a payload to the vulnerable endpoint, executing a command on the target server.

Features

• Blind RCE: Executes commands on the target server without receiving direct responses.
• Netcat Listener: Requires a netcat listener setup on the attacker's machine to receive outputs.

Prerequisites

• Python 3.x
• requests library (can be installed via pip)

Usage