ClearML Exploit Script

This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command.

Features

• Uploads a malicious pickle artifact to ClearML.
• Executes a reverse shell or a custom command on the target machine.
• Supports custom project and task names.
• Allows setting a tag on the task.

Usage

Prerequisites

• Python 3.x
• ClearML SDK
• argparse (usually included with Python)

Installation

1. Clone the repository:

   root@kitploit:~

   git clone https://github.com/diegogarciayala/CVE-2024-24590-ClearML-RCE-CMD-POC.git
   cd CVE-2024-24590-ClearML-RCE-CMD-POC
   

2. Install the ClearML SDK:

   root@kitploit:~

   pip install clearml
   clearml-init
   

Running the Script