Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-39197-POC — CVE-2022-39197(CobaltStrike XSS <=4.7) POC | Kitploit
Tools/GitHubGitHub/xzajyjs/cve-2022-39197-poc
Exploit FrameworksVulnerability AnalysisWeb Application ExploitationPenetration TestingCommand and ControlRed Teaming
GitHubxzajyjs/cve-2022-39197-poc

CVE-2022-39197-POC

CVE-2022-39197(CobaltStrike XSS <=4.7) POC

View Repository
47133 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-39197-POC

中文版本README_CN.md

Vulnerability Intro

According to the Update Log of the latest version 4.7.1 officially released by CobaltStrike on 20 September, teamserver version(<=4.7) has XSS vulnerability, which can cause RCE.

We were contacted by an independent researcher named "Beichendream" to inform us of an XSS vulnerability they found in the team's servers. This would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code RCE remotely.

POC Intro

At present, this POC can only implement teamserver bomb pictures. Integrated CobaltStrikeParser analysis tool to achieve one-stop online.

Usage

For details, please turn to my Chinese Blog

root@kitploit:~
pip3 install -r requirements.txt
python3 cve-2022-39197-poc.py -i http://172.16.12.2:3000/logo.png -b beacon.exe

image-20220923210117698

Reference code

https://github.com/Sentinel-One/CobaltStrikeParser https://github.com/burpheart/CS_mock

Download Tool