CVE-2023-5561-POC-Updated

This repository contains a modified version of the original Proof-of-Concept (PoC) for CVE-2023-5561. The original PoC, which can be found <a href=https://github.com/pog007/CVE-2023-5561-PoC>here, sends a high volume of requests in parallel, which may trigger Web Application Firewalls (WAFs) or cause the server to block the connection due to excessive traffic.

Modification

• Added a 10-second delay between each request in the bruteforce_search function using time.sleep(10). This helps prevent the PoC from overwhelming the target server.
• The core functionality of the exploit remains unchanged, ensuring the PoC still works effectively while reducing the likelihood of detection and blocking.

Usage

python3 poc.py <target site root url>

This version is useful for conducting responsible security assessments while minimizing the risk of being blocked due to aggressive request patterns.