mercylessghost/cve-2021-21974Proof-of-concept exploit for CVE-2021-21974, a remote code execution vulnerability in VMware ESXi OpenSLP service. Demonstrates unauthenticated RCE on affected hosts for security research.
This repository contains a Proof of Concept (PoC) for the vulnerability CVE-2021-21974, a remote code execution (RCE) vulnerability in the OpenSLP service of VMware ESXi. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code on the affected ESXi host.
Before running the PoC, make sure you have the following:
requirements.txt file (see the installation section)Clone this repository:
git clone https://github.com/example/cve-2021-21974-poc.git
cd cve-2021-21974-poc
Install the dependencies:
pip install -r requirements.txt
Warning: This PoC was created for educational and research purposes. Do not use this code on systems you do not have explicit permission to test.
Configure the target (vulnerable ESXi host):
config.json file with the host IP address and other relevant information.Run the exploit:
python3 exploit.py --target <IP_DO_ALVO>
After execution, the PoC will attempt to exploit the vulnerability and demonstrate remote code execution on the vulnerable ESXi host.
To protect systems against the CVE-2021-21974 vulnerability, apply the following fixes:
Update VMware ESXi to a patched version:
Disable the OpenSLP service (if not needed):
Implement firewalls and Access Control Lists (ACLs):
This repository was created solely for educational and security research purposes. Misuse of this code may result in legal action. The author is not responsible for any damage or misuse.
Author: Mercylessghost
License: MIT