Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2024-51378 PoC — CyberPanel 安全漏洞

Source
Associated Vulnerability
Title: CyberPanel 安全漏洞 (CVE-2024-51378)
Description:getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
Description
A Python script to scan websites for the CVE-2024-51378 vulnerability.
Readme
# CVE-2024-51378 Vulnerability Scanner
![Screenshot](https://i.imgur.com/EN1pvZF.png)
A Python script to scan websites for the CVE-2024-51378 vulnerability.

## Features
- Identifies vulnerable sites based on CSRF tokens and custom endpoints.
- Highlights results as `[GOOD]` or `[SAFE]` with color-coded outputs.
- Logs detailed scan results to a file.
- Displays ASCII art with project details.

## Requirements
- Python 3.6+
- Required libraries:
  - `httpx`
  - `pyfiglet`

## Installation
1. Clone the repository:
   git clone https://github.com/i0x29A/CVE-2024-51378.git
   cd CVE-2024-51378

2. Install dependencies:
   pip install -r requirements.txt

## Usage
1. Prepare a file containing URLs to scan (one per line).

2. Run the script:
   python3 scanner.py <file> <output>
   - `<file>`: Path to the file with URLs.
   - `<output>`: Path to save the log file.

### Example
File `targets.txt`:
http://example.com
http://testsite.org

Run the scanner:
python3 scanner.py targets.txt results.log

## Notes
- Use responsibly! This tool is for educational and testing purposes only.
- Ensure compliance with all applicable laws and policies when using the scanner.

## License
This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.

## Authors
- [@Luka Petrovic](https://github.com/refr4g)
- [@cr4shed](https://github.com/i0x29A)
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →