c1ph3rbyt3/cve-2022-29464Python exploit script for CVE-2022-29464, enabling file upload to vulnerable servers. Supports single target and batch processing with custom JSP payloads for authorized security testing.
This repository contains a script to exploit the CVE-2022-29464 vulnerability, which allows file uploads to vulnerable servers. Use it only in authorized environments and for educational purposes.
# Clone the repository from GitHub
git clone https://github.com/c1ph3rbyt3/CVE-2022-29464.git
cd CVE-2022-29464
pip install -r requirements.txt
The script offers two main modes:
-f, --file: Specifies a file with a list of targets.-t, --target: Specifies a single target in the format HOST:PORT or IP:PORT.-j, --jsp_file: Name of the JSP file to be uploaded (e.g., uploader.jsp). Required.The hosts file must contain a list of targets in the following format:
127.0.0.1:8080
example.com:443
192.168.1.1:8443
Each line must include an IP address or hostname followed by the port, separated by a colon (:).
uploader.jsp fileThe uploader.jsp file included in this repository can be replaced with another one; this is only a reference file. The repository's file is uploaded to the server for upload and execution testing.
python CVE-2022-29464.py -t 192.168.1.1:8080 -j uploader.jsp
python CVE-2022-29464.py -f hosts.txt -j uploader.jsp
python CVE-2022-29464.py -h
Created by: C1ph3rByt3