CVE-2023-50564

CVE-2023-50564 教育目的のみで使用してください。 このスクリプトは CVE-2023-50564 を悪用して、ターゲットサーバーにリバースPHPシェルをアップロードします。 このようなシェル を使用できます。phpファイルをzip圧縮して、そのzipをこのスクリプトに渡すだけです。 使用例 root@kitploit: python3 cve-2023-50564.py -u http://idonot.exist -f shell.zip -p hunter2...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ 法律/道德声明：此脚本仅用于授权环境 ✅（CTF、实验室、经过许可的渗透测试）。请勿在未经授权的系统上使用 ❌。 🧾 此脚本功能是什么？ exploitgreenhorn.py 自动化了针对 Web 面板的典型漏洞利用链： ✅ 登录面板（需要有效密码） ✅ 在内存中创建 ZIP（不写本地文件）📦 ✅ 将包含反向 shell 的 rev.php 放入其中 🔁🐚 ✅ 将 ZIP 作为“模块”上传到面板 🧩⬆️ ✅ 通过访问已上传的 PHP URL 触发 payload 🚀 📌 模块名随机生成以避免冲突（例如：abcdefg、xqpmzui 等）🎲 🧰 环境要求...

CVE-2023-50564

An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 CVE-2023-50564 is an RCE vulnerability in Pluc...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 - Pluck CMS v4.7.18 Exploit Overview This...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload v...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 For educational purposes only. This script abu...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 How to use First setup a listener f...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 PoC This repository contains a Proof of Con...

CVE-2023-50564

An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file...

CVE-2023-50564

An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file...

CVE-2023-50564

An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file...

CVE-2023-50564

CVE-2023-50564 is an authenticated arbitrary file upload vulnerability in Pluck-CMS v4.7.18. The weakness exists in the ZIP upload flow (notably the component paths like /inc/modules_install.php and endpoints such as /admin.php?action=installmodule) that allows an attacker with valid credentials ...