🔥 CVE-2024-27348 Exploitation Toolkit

🎓 Academic Project

📚 Course: FC411 - Secure Network Design
👨‍🏫 Instructor: Dr. Maira Sultan
🏫 University: University of Prince Mugrin

📅 Year: 2025

⚡ A complete toolkit for exploiting CVE-2024-27348 (Apache Huge-Graph-Server) developed as part of the FC411 course requirements. This project includes both the exploit and a bind shell for educational purposes.

📋 Table of Contents

• 📖 Overview
• 🛠️ Tools Included
• ✅ Prerequisites
• 📦 Installation
• 🚀 Usage
• ⚠️ Vulnerability Details
• 🚨 Warning & Disclaimer
• 🔒 Mitigation

📖 Overview

This repository contains two complementary tools for exploiting CVE-2024-27348:

🔧 exploit.py - Exploits the vulnerability to deploy a PHP web shell
🖥️ bind_shell.py - Provides an interactive shell interface to the deployed web shell

Together, these tools provide a complete exploitation chain for testing vulnerable Apache Huge-Graph-Server instances.

🛠️ Tools Included

1. 🔧 exploit.py

Deploys a PHP web shell on vulnerable Apache TinkerPop Gremlin Server (CVE-2024-27348).

✨ Features:

• 🎯 Exploits Gremlin query injection vulnerability
• 📁 Deploys PHP web shell to /tmp/shell.php
• 🌐 Starts PHP development server on port 4444
• 🔐 Base64 encodes payload to bypass potential filters
• ⌨️ Simple command-line interface with URL validation

2. 🖥️ bind_shell.py

Interactive command-line interface for the deployed PHP web shell.

✨ Features:

• 💬 Interactive shell-like interface
• 🔗 URL encoding for command safety
• ⏱️ Timeout handling
• 🔄 Session management
• 🚪 Clean exit options (exit or quit)

✅ Prerequisites

• 🐍 Python 3.7 or higher
• 🎯 Target running vulnerable Apache Huge-Graph-Server (≤ 3.7.1)
• 🐘 PHP installed on the target machine (for the web shell)

📦 Installation

1. 📥 Clone the repository:

git clone https://github.com/wqfh/MasterOfTheIndestry.git
cd MasterOfTheIndestry

📦 Install required dependencies:

pip install -r requirements.txt

✅ Verify installation:

python3 exploit.py --help
python3 bind_shell.py --help

🚀 Usage

🔧 Step 1: Deploy the Shell

Use exploit.py to deploy the PHP web shell: bash

python3 exploit.py -u http://target:8182

🖥️ Step 2: Connect to the Shell

Use bind_shell.py to interact:

python3 bind_shell.py -u http://target:4444

⚠️ Vulnerability Details

📊 CVE-2024-27348 Quick Facts

🔍 How It Works

1. 📨 Send malicious Gremlin query to /gremlin endpoint
2. 🛠️ Use Java reflection to execute commands
3. 📝 Write PHP shell to /tmp/shell.php
4. 🌐 Start PHP server on port 4444
5. 💻 Connect via bind_shell.py

🚨 Warning & Disclaimer

⚠️ IMPORTANT LEGAL NOTICE

✅ Permitted Uses

• 🎓 Educational purposes
• 🔐 Authorized penetration testing
• 🧪 Security research
• ✅ Vulnerability assessment on your own systems

🔒 Mitigation

🔄 Permanent Fix

• ⬆️ Upgrade to 3.7.2+
• 🔧 Apply security patches immediately
• 📖 Review Apache Security Advisory