CVE-2023-28771 PoC — Zyxel ZyWALL USG 操作系统命令注入漏洞

Description

PoC for CVE-2023-28771 based on Rapid7's excellent writeup

介绍

# CVE-2023-28771-PoC
PoC for CVE-2023-28771 based on Rapid7's excellent writeup

Requires the scapy Python library for sending IKE packets.

```
usage: CVE-2023-28771-poc.py [-h] [--cmd CMD] [--lhost LHOST] [--lport LPORT] rhost

positional arguments:
  rhost

options:
  -h, --help     show this help message and exit
  --cmd CMD
  --lhost LHOST
  --lport LPORT
```

Either use --cmd to run an arbitrary command, or use --lport and --lhost to spawn a revshell

文件快照

备注