CVE-2024-9465 PoC — Palo Alto Networks Expedition 安全漏洞

Description

CVE-2024-9465 Proof of Concept

介绍

# CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.

## Affected Versions
From 1.2.0 (including) to 1.2.96 (excluding)

## Prerequisites
Before running the script, make sure you have:
- Python 3.x installed on your system.
- [sqlmap](https://sqlmap.org/) installed on your system
- And run `pip install -r requirements.txt` to make sure the depndecies are satisfied.

## Usage
```bash
python3 CVE-2024-9465.py -u https://target.com
```

## Disclaimer
This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by this tool.

## License

This project is licensed under the MIT License.

文件快照

备注