关联漏洞
标题:Moodle 安全漏洞 (CVE-2024-43425)Description:Moodle是Moodle开源的一套免费的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle存在安全漏洞，该漏洞源于需要额外的限制来避免计算问题类型中的远程代码执行风险。
Description
🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡
介绍
# Moodle 4.4.0 - Authenticated Remote Code Execution (CVE-2024-43425) Exploit
**CVE:** CVE-2024-43425
---
## Affected Versions
- Moodle 4.4 to 4.4.1
- Moodle 4.3 to 4.3.5
- Moodle 4.2 to 4.2.8
- Moodle 4.1 to 4.1.11
---
## Description
This exploit targets an authenticated Remote Code Execution (RCE) vulnerability in Moodle versions listed above. It allows an attacker with valid credentials to execute arbitrary commands on the server by exploiting insecure question bank editing functionality.
---
## Usage
1. Clone or download this repository.
2. Install required dependencies:
```
pip install -r requirements.txt
```
3. Run the exploit script:
```
python exploit.py --url http://target_moodle_url --username your_username --password your_password --cmd "whoami"
```
---
## 🖼️ Screenshot
---
## Disclaimer
This exploit is provided for educational and authorized testing purposes only. Unauthorized use against systems you do not own or have explicit permission to test is illegal and unethical.
---
文件快照
[4.0K] /data/pocs/430c6748bfcee51167fac493660d6579fab59c19
├── [8.1K] app.py
├── [4.0K] images
│ └── [ 96K] Screenshot.png
├── [1.1K] README.md
└── [ 17] requirements.txt
1 directory, 4 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。