CVE-2024-28741 PoC — NorthStarC2 跨站脚本漏洞

Source

https://github.com/chebuya/CVE-2024-28741-northstar-agent-rce-poc

Associated Vulnerability

Title:NorthStarC2 跨站脚本漏洞 (CVE-2024-28741)
Description:NorthStarC2是Engin个人开发者的一个开源的指挥和控制框架。 NorthStarC2 v1版本存在跨站脚本漏洞，该漏洞源于允许远程攻击者通过 login.php 组件执行任意代码。

Readme

# NorthStar C2 agent RCE via stored XSS
Agent RCE PoC for CVE-2024-28741, a stored XSS vulnerability in NorthStar C2.

This exploit works by sending multiple malicious agent registration requests to the teamserver to incrementally build a functioning javascript payload in the logs web page. This XSS can be leveraged to execute commands on NorthStar C2 agents

Full explanation: https://blog.chebuya.com/posts/discovering-cve-2024-28741-remote-code-execution-on-northstar-c2-agents-via-pre-auth-stored-xss/


https://github.com/chebuya/CVE-2024-28741-northstar-agent-rce-poc/assets/146861503/182070a5-1a70-4875-b440-867ee3f43c6f

File Snapshot


 [4.0K]  /data/pocs/25023213f17133343b0c63656e64102b59656f2b
├── [5.2K]  exploit.py
└── [ 631]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!