yoohhuu/rocket-chat-3.12.1-poc-cve-2021-22911-Proof-of-concept exploit for CVE-2021-22911 targeting Rocket.Chat 3.12.1. Automates privilege escalation from low-privileged user to administrator and achieves remote code execution via authenticated API abuse.
-u = Low priv user email [ No 2fa ]
-a = Administrator email
-t = URL (Eg: http://rocketchat.local)
python3 rocketchat.py -u [email protected] -a [email protected] -t http://192.168.169.164:3000
Execute any code with RCE. (no result of execution shown)
revshell.com -> interactive shell
source:50108.py
