cve-2024-0305exp

Available exp for cve-2024-0305, please credit the source if referenced, thank you!

0x01 Product Background

Ncast High-Definition Intelligent Recording & Broadcasting System is a product of Guangzhou Encast Electronic Technology Co., Ltd. This system has an RCE vulnerability that allows attackers to execute arbitrary commands, enabling them to gain server privileges and compromise the server.

0x02 Affected Versions

Ncast 2007 Ncast 2017

0x03 Search for Vulnerable Targets

FOFA: app="Ncast-产品"

0x04 Usage

python cve-2024-0305.py -u {YOUR TARGET} -p {TARGET PORT} Note: Do not include http://

0x05 Other Notes

This script uses the RCE command "whoami" by default. If further exploitation is needed, you can modify it accordingly.