
Script hecho para obtener una webshell gracias a la vulnerabilidad de cacti CVE-2025-24367 en su versión 1.2.28.
I have created this small script for CVE-2025-24367 - From Cacti, a script made to obtain a webshell thanks to the vulnerability in cacti version 1.2.28.
Script usage:
python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password "password"
Upon successful connection, a webshell will be generated at the parameter: danshell.php?0= Where you can execute your commands, mainly shell.

