wa6n3r/cve-2024-3400
Tool for automated exploitation of the CVE-2024-3400 vulnerability in Palo Alto Networks PAN-OS devices. Supports multithreaded scanning, automatic artifact download, and detailed logging.
!!!Important: Use only on systems for which you have explicit permission to test.
requests>=2.28.0rich>=12.0.0urllib3>=1.26.0# Clone or create the project
git clone https://github.com/wa6n3r/CVE-2024-3400 && cd CVE-2024-3400
# Install dependencies
pip install -r requirements.txt
# Basic run
python exploit.py -f targets.txt -t 50
# Parameters:
# -f, --file File with list of targets (required)
# -t, --threads Number of threads (default: 100)
# Targets file format (targets.txt)
example.com
https://target.local:443
192.168.1.100
# Output files
maybe_rce.log - Targets where exploit was successfully sent
confirmed_rce.log - Confirmed RCE cases (file accessible)
output/ - Downloaded cert.main.css files named {domain}_cert.main.css