c1ph3rbyt3/cve-2022-24816Exploit script for CVE-2022-24816 targeting GeoServer. Executes arbitrary commands on vulnerable servers via crafted HTTP requests. Includes dependency management and colorized output.
Clone the repository:
git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git
cd CVE-2022-24816
Install dependencies: Ensure you have Python 3 installed. Then, install the required dependencies by running:
pip install -r requirements.txt
The requirements.txt file includes the following libraries:
requestsurllib3colorama-u or --url: Specifies the target URL of the vulnerable GeoServer server. Example: http://example.com or https://example.com.-c or --command: Specifies the command to be executed on the target system.Run the script with a specific command:
python CVE-2022-24816.py -u https://vulnerable-geoserver.com -c "whoami"
This will send the malicious payload to the target server and display the command output on the screen.
Created by: C1ph3rByt3