CVE-2024-51378
Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts.
- 1-CVE-2024-51378.pdf - main file with a textual description of the results
- 2-exploit - files for section 2 of the work
- 51378_use.py – file for applying the exploit in single-threaded mode, allows the user to send a sequence of commands to the URL specified at startup.
Example launch: python3 51378_use.py https://157.13.218.109:8090
- 3-scan - files for section 3 of the work
- port8090.txt - result of the zmap program (list of IPs with open port 8090)
- get-check-multi.py - script for checking a list of IP addresses with a GET request in multi-threaded mode, allows finding hosts with Cyberpanel installed
Example launch: python3 get-check-multi.py port8090.txt
- CyberPanel-2024-12-14_16-10-48.txt - result of the get-check-multi.py script, list of hosts with Cyberpanel installed
- 4-use-exploit - files for section 4 of the work
- 4-1-nuclei - files for sections 4.1, 4.2 of the work (nuclei)
- CVE-2024-51378.yaml - nuclei template for scanning in active mode
Example launch: nuclei -l test.txt -t CVE-2024-51378.yaml –o result-active.txt
- result-active.txt - scanning results in active mode
- CVE-2024-51378-passive.yaml - nuclei template for scanning in passive mode
Example launch: nuclei -l test.txt -t CVE-2024-51378-passive.yaml –o result-passive.txt
- result-passive.txt - scanning results in passive mode
- 4-2-python - files for section 4.3 of the work (python)
- 51378_check.py - script for scanning in active mode using multi-threading.
Example launch: python3 51378_check.py CyberPanel-2024-12-15_10-41-54.txt
- result-51378-2024-12-14_16-45-10.txt - scanning results by python script in active mode