LFI to RCE Exploit via Log Poisoning

📝 Description

This Python3 script exploits Local File Inclusion (LFI) vulnerabilities to achieve Remote Code Execution (RCE) through log poisoning techniques. Specifically designed for Artica Proxy (CVE-2024-2053) but adaptable to other LFI scenarios.

⚡ Features

• Multiple LFI test vectors (/etc/passwd, /proc/self/environ)
• 4 different PHP payload variants for evasion
• Automatic webshell deployment
• Proxy support (Burp/OWASP ZAP)
• SSL verification toggle
• Verbose debugging mode

🛠️ Installation

git clone https://github.com/yourusername/artica-lfi-rce.git
cd artica-lfi-rce
pip3 install -r requirements.txt

🚀 Usage

python3 artica.py <target_url> <endpoint> [options]
Basic:
python3 artica.py http://vulnerable.com /images.listener.php
With proxy:
python3 artica.py https://target.com:9000 /vuln.php -p http://127.0.0.1:8080
Verbose mode:
python3 artica.py http://victim.com /endpoint.php -v

python3 artica.py  /path.php --no-verify

🎯 Technical Details

⚠️ Legal Disclaimer

This tool is provided for educational and authorized penetration testing purposes only. The developer assumes no liability and is not responsible for any misuse or damage caused by this program.

📜 License

MIT License - Copyright (c) 2024