CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling

Exploit

This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the affected device.

Usage

Read the code ;)