
Script to exploit CVE-2023-38035
This bash script automates the process of scanning for vulnerable MobileIron systems that are susceptible to the CVE-2023-38035 exploit. The script performs multiple checks, including checking for required programs, downloading potential targets from Shodan, scanning these targets, and finally attempting to spawn a shell on a vulnerable system.
The following programs/packages are required for this script to work:
Ensure that you have properly configured Shodan and Ngrok.
git clone <repository-url>
cd <project-directory>
chmod +x mics_hunter.sh
./mics_hunter.sh
Just run the script, and it will perform all the tasks sequentially:
This script uses an external tool hessian.py to serialization of data. Make sure you have it in the same directory as this script.
This script uses hessian.py which is a modified version of a script created by horizon3ai.
This script is for educational purposes only. The use of this script for any malicious activities is prohibited.
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
GPLv3
Feel free to reach out to me if you have any questions or issues!