Fuel CMS 1.4.1 - Remote Code Execution (RCE) Exploit

This repository contains a Python 3 implementation of an exploit for Fuel CMS version 1.4.1. The script leverages CVE-2018-16763, a vulnerability where insufficient input validation in the filter and preview parameters allows for PHP Code Evaluation and Pre-Auth Remote Code Execution.

⚠️ Disclaimer

This tool is for educational purposes and authorized penetration testing only. Running this against systems without explicit permission is illegal.

🛠 Features

• Python 3 Optimized: Compatible with modern Python environments.
• Reverse Shell Integration: Automates the process of spawning a reverse shell back to your machine.
• Interactive Flow: Guided CLI prompts for ease of use.

🚀 Usage Guide

1. Prepare your Listener

Before running the script, start a listener on your attacking machine to catch the reverse shell. You can use netcat:

nc -nlvp <YOUR_PORT>

2. Run the Exploit

Execute the script using Python 3. You will be prompted for your machine's IP and the port you set up in the previous step.

python3 exploit.py

3. Execution Steps

1. When prompted, choose the option: shell_me.
2. Enter your Attacking Machine IP.
3. Enter your Listening Port.
4. Once the connection is established, check your netcat terminal. You should have a shell!

4. Finding the Flag

Once inside the system, use standard Linux commands to locate the flag (e.g., cat /home/user/user.txt or search using find).

🔍 Vulnerability Details

• CVE: CVE-2018-16763
• Affected Version: Fuel CMS <= 1.4.1
• Vulnerability Type: PHP Code Evaluation / Command Injection
• Impact: Allows an unauthenticated attacker to execute arbitrary system commands on the server.

📦 Requirements

• Python 3.x
• requests library (pip install requests)