
CVE-2023-4220에 대한 PoC - Chamilo LMS - BigUpload의 인증되지 않은 파일 업로드
뻔뻔하게 복사함 직접 영감을 받음: https://starlabs.sg/advisories/23/23-4220/
Chamilio CVE-2023-4220 POC Exploit
positional arguments:
url The Chamilio Url. e.g. http://example.com
options:
-h, --help show this help message and exit
-c C The command to execute. e.g. "id", default: id
-f F The filename to name the uploaded file. default: test.php
-r if set, will upload php revshell
-i I revshell attacker ip
-p P revshell attacker port