c3rrberu5/cve-2022-46169Python exploit for CVE-2022-46169 targeting Cacti 1.2.19 with unauthenticated remote code execution. Supports check mode for vulnerability scanning and exploit mode with X-Forwarded-For bypass.
Cacti 1.2.19에서 CVE-2022-46169 취약점을 익스플로잇하는 도구
[옵션]
-u --url victim's url
-f --forwarded 인증 우회를 위한 X-Forwarded 값
-m --mode: 취약한 서버 확인(check) 또는 재미있는 익스플로잇 모드(exploit) :D
[사용법]
1. $> ./cve_2022_46169.py -u http://10.10.10.10/cacti -f 10.10.10.10 -m exploit
2. $> ./cve_2022_46169.py -u http://10.10.10.10/cacti -f 127.0.0.1 -m check
[참고 자료]
https://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution/
