flar3ad is a tool that takes advantage of the CVE-2026-51031 to read files from a target server taking advantage of the /v1 endpoint of FlareSolverr's API and using driver.get() function in order to exploit the vulnerability. Further explained in xinyi's blog.

Installation

git clone https://github.com/daemoncibsec/flar3ad.git
cd flar3ad
python3 -m venv venv
source venv/bin/activate
pip install rich
pip install argparse
pip install requests
chmod +x flar3ad

To exit the venv:

deactivate

Usage/Examples

Read the /etc/passwd file of the target server.

./flar3ad http://localhost:8191/ /etc/passwd

Authors

• @daemoncibsec