The exploit works by:

1. Crafting a malicious search query containing a null byte (%00)
2. Injecting PowerShell commands within macro delimiters {. and .}
3. The server processes the macro and executes the embedded PowerShell code
4. Establishing a reverse shell connection back to the attacker

Usage

Step 1: Set up a Netcat Listener

Before executing the exploit, set up a listener on your attacking machine to catch the reverse shell:

Step 2: Execute the Exploit

Required Parameters:

• -l, --lhost <LHOST>: Your local IP address (attacker machine)
• -p, --lport <LPORT>: Your local port for the reverse shell
• -r, --rhost <RHOST>: Target IP address (vulnerable HFS server)

Optional Parameters:

• -t, --rport <RPORT>: Target port (default: 80)

Disclaimer

This tool is for educational and authorized penetration testing purposes only. Use responsibly and only on systems you own or have explicit permission to