CVE-2016-2555 Exploit

This exploit targets a SQL Injection vulnerability and an authentication weakness vulnerability in ATutor 2.2.1. By exploiting these vulnerabilities, the attacker can upload malicious code to achieve Remote Code Execution (RCE) on the vulnerable server.

Usage

$ python3 CVE-2016-2555.py {target}:{port}

Example:

$ python3  CVE-2016-2555.py 127.0.0.1:8080

Features

• Exploits the SQL Injection vulnerability in ATutor 2.2.1.
• Bypasses authentication to gain administrative access.
• Uploads a malicious payload to achieve RCE.

Disclaimer

This script is provided for educational purposes only. Unauthorized use of this script against systems without proper authorization is illegal. Always ensure you have explicit permission from the system owner before running this exploit.