目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CVE-2024-7928 PoC — FastAdmin 路径遍历漏洞

来源
https://github.com/bigb0x/CVE-2024-7928
关联漏洞
标题:FastAdmin 路径遍历漏洞 (CVE-2024-7928)
Description:FastAdmin是Karson个人开发者的一套基于ThinkPHP和Bootstrap的网站后台开发框架。 FastAdmin 1.3.4.20220530之前版本存在路径遍历漏洞，该漏洞源于存在任意文件读取漏洞，攻击者利用此漏洞可以获取系统敏感信息。
Description
Will attempt to retrieve DB details for FastAdmin instances
介绍
# CVE-2024-7928
POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.
![Banner](screens/screen.jpg)

## Overview

This is a bulk scanning and exploitation tool for CVE-2024-7928: FastAdmin up to 1.3.3.20220121 allows unauthenticated attackers to execute a directory traversal. This tool is based on this [Security Research](https://wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd).

## How to Use

### Install the script requirements:
```sh
pip install -r requirements.txt
```

### Single Target:
```sh
python CVE-2024-7928.py -u https://target:9090
```

### Bulk Sscan:
```sh
python CVE-2024-7928.py -f file.txt
```

## Contact

For any suggestions or thoughts, please get in touch with [me](https://x.com/MohamedNab1l).


## Disclaimer

I like to create my own tools for fun, work and educational purposes only. I do not support or encourage hacking or unauthorized access to any system or network. Please use my tools responsibly and only on systems where you have clear permission to test.

## References

- https://nvd.nist.gov/vuln/detail/CVE-2024-7928
- https://vuldb.com/?id.275114
- https://wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd
文件快照

 [4.0K]  /data/pocs/c3fad90181c35e4630ed1699c45b79a51cb5d708
├── [6.2K]  CVE-2024-7928.py
├── [1.2K]  README.md
├── [  17]  requirements.txt
└── [4.0K]  screens
    └── [ 67K]  screen.jpg

1 directory, 4 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。