
Python-based proof-of-concept exploit for CVE-2024-7399 with check, command execution, and file upload capabilities against HTTPS endpoints.
Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/.
Usage:
python3 CVE-2024-7399.py https://localhost:7002/ --check
python3 CVE-2024-7399.py https://localhost:7002/ --execute
python3 CVE-2024-7399.py https://localhost:7002/ --upload test.txt
When executing commands, use cmd /c or powershell -c before your actual command!