CVE-2024-1651 PoC — Torrentpier 代码问题漏洞

Description

Python script to automate generic gadget chain from CVE-2024-1651. There's missed length and nullbytes URL Encoding.

介绍

# CVE-2024-1651
This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE (Remote Code Execution). Here, I have created a faster and easier-to-use PoC (Proof of Concept). Therefore, if anyone wants to reproduce the finding, they can use this as a reference example.

# Preview
![image](https://github.com/sharpicx/CVE-2024-1651-PoC/assets/44630640/db60cb47-3992-4bfd-a177-925cec06ddc4)

文件快照

备注