Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-41817-poc — CVE-2024-41817 POC ImageMagick <= 7.1.1-35 Arbitrary Code Execution | Kitploit
Tools/GitHubGitHub/dxsk/cve-2024-41817-poc
Payload GenerationVulnerability AnalysisExploitationWeb SecurityPenetration TestingLearning & Education
GitHubdxsk/cve-2024-41817-poc

CVE-2024-41817-poc

CVE-2024-41817 POC ImageMagick <= 7.1.1-35 Arbitrary Code Execution

View Repository
411 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Website
Share

ImageMagick Arbitrary Code Execution (CVE-2024-41817)

Proof of Concept exploit for ImageMagick versions <= 7.1.1-35 allowing arbitrary code execution via malicious XML delegation.

Description

This exploit takes advantage of a vulnerability in ImageMagick that allows arbitrary code execution through specially crafted libraries. The script can:

  • Detect vulnerable ImageMagick versions
  • Generate malicious payloads
  • Automatically deploy and execute the exploit

Requirements

  • Python 3.11+
  • GCC >= 9.4.0
  • Python packages:
    • paramiko

Installation

root@kitploit:~
git clone https://github.com/Dxsk/CVE-2024-41817-poc/
cd CVE-2024-41817-poc
pip install -r requirements.txt

Usage

Auto-detect vulnerable version:

root@kitploit:~
python3 exploit.py -H <target> -p <port> -u <user> -P <password> -d

Build payload only:

root@kitploit:~
python3 exploit.py -c "command" -B

Full auto mode (detect, build and deploy):

root@kitploit:~
python3 exploit.py -c "command" -H <target> -p <port> -u <user> -P <password> -A

Options:

  • -c, --command: Command to execute (default: "id")
  • -H, --host: Target host
  • -p, --port: SSH port (default: 22)
  • -u, --username: SSH username
  • -P, --password: SSH password
  • -d, --detection: Auto-detect ImageMagick if vulnerable
  • -B, --build: Only build the payload
  • -A, --auto: Full auto mode
  • -v, --verbose: Verbose output

Tested On

  • Ubuntu 22.04.5 LTS
  • ImageMagick 7.1.1-35

Author

  • Daihyxsk
  • Github: https://github.com/Dxsk

References

  • ImageMagick Security Advisory
  • CVE: CVE-2024-41817

Disclaimer

This tool is for educational purposes only. Use it only against systems you have permission to test.

Download Tool