CVE-2024-4577 Exploit

Exploit of the PHP CGI Argument Injection vulnerability (CVE-2024-4577) to achieve Remote Code Execution (RCE) on a vulnerable PHP version running in a Windows environment, discovered by Orange Tsai. For more details, check out DEVCORE's Blog.

Requirements

Language Used = Python3
Modules/Packages used:

• random
• string
• requests
• warnings
• datetime
• optparse
• colorama
• multiprocessing
• time

Install the dependencies:

pip install -r requirements.txt