gr-1m/cve-2024-0012-pocCVE-2024-0012是Palo Alto Networks PAN-OS软件中的一个身份验证绕过漏洞。该漏洞允许未经身份验证的攻击者通过网络访问管理Web界面，获取PAN-OS管理员权限，从而执行管理操作、篡改配置，或利用其他需要身份验证的特权提升漏洞（如CVE-2024-9474）
CVE-2024-0012 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to access the management web interface over the network, obtain PAN-OS administrator privileges, and thereby perform administrative operations, tamper with configurations, or exploit other privilege escalation vulnerabilities that require authentication (such as CVE-2024-9474).
This is an actual proof of concept (POC), inspired by this article.
Usage:
python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify
Note: If SSL verification fails or the certificate has expired, you can add the --no-verify parameter; otherwise, do not use this parameter.