CVE-2024-29824 PoC — Ivanti EPM SQL注入漏洞

Source

https://github.com/R4be1/CVE-2024-29824

Associated Vulnerability

Title:Ivanti EPM SQL注入漏洞 (CVE-2024-29824)
Description:An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Description

Ivanti EPM SQL Injection Remote Code Execution Vulnerability（Optimized version based on h3）

Readme

I have made some optimizations to the scripts in horizon3ai (actually, it is just adding a verification mechanism to ensure accuracy)
Original project address: https://github.com/horizon3ai/CVE-2024-29824

add "-f / --file" and ThreadPool...

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!