pwniel/ivanti_shellCVE-2024-21887 Exploitation with Ngrok Reverse Shell
This repository provides a Python script designed to demonstrate the exploitation of the CVE-2024-21887 vulnerability in Ivanti Connect Secure gateways. It utilizes Ngrok to establish a reverse shell for educational and ethical testing purposes. Disclaimer
The tools and scripts provided are for educational and ethical testing purposes only. Unauthorized testing, exploitation, or use of this script on systems without explicit permission is strictly prohibited and potentially illegal. Always obtain permission before conducting any security assessments. Prerequisites
Before you begin, ensure you have the following:
Python 3.x installed on your system. Ngrok account and Ngrok installed. Sign up for free if you haven't already. requests and pyngrok Python libraries. They will be installed as part of the setup process.
Clone the Repo
git clone https://github.com/pwniel/ivanti_shell.git
cd cve-2024-21887-ngrok-reverse-shell
Install Dependencies:
Use pip to install the required Python libraries:
pip install -r requirements.txt
After signing up for Ngrok, download and install the Ngrok client from the official website.
Connect your Ngrok account by following the instructions provided in the Ngrok setup guide, which typically involves running a command similar to:
ngrok authtoken <your_auth_token>
Replace <your_auth_token> with the token from your Ngrok dashboard.
Start the Script:
Run the script with the target Ivanti host as an argument:
python ivanti_shell.py https://target_ivanti_host
Replace https://target_ivanti_host with the actual host you have permission to test.
Interact with the Reverse Shell:
If the exploitation is successful and the reverse shell is established, you will have command line access to the target system through the Ngrok tunnel.