hmhlol/craft-cms-rce-cve-2024-56145Docker-based lab environment to reproduce and exploit CVE-2024-56145, a PHP register_argc_argv RCE vulnerability in CraftCMS, with step-by-step setup and exploitation guidance.
A POC lab environment for CVE-2024-56145 CraftCMS RCE.
A potential RCE vulnerability is found in craftCMS if the register_argc_argv option is enabled in php.ini. This is a POC lab environment where you can reproduce and exploit the bug.
The full explotation steps of the bug can be found at Aesstnote Blog.
You have to download this full repo rather than downloading the zip file as some files contain the application configuration. Run sudo ./build_docker.sh to setup the lab.
