Skip to content

Madan301/CVE-2024-2054

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 

Repository files navigation

CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization (RCE)

An exploit proof of concept for ARTICA PROXY Administrative web application CVE-2024-2054

Blog Post

More details here: https://blog.sonicwall.com/en-us/2024/03/unpatched-php-deserialization-vulnerability-in-artica-proxy/

Usage

$ python3 CVE-2024-2054.py
Enter url: https://8X.XX.XX.X4:9000
Vulnerable
enter command: ls

assets
index.html
wiz.upload.php
wiz.wizard.php
wiz.wizard.progress.php

Disclaimer

This POC has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where explicitly authorized. Project creator/maintainers are not responsible or liable for misuse of the software/POC. Use responsibly.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages