## https://sploitus.com/exploit?id=0E8BBA70-6EDF-5D6F-B668-411C6A2720E7
LFI to RCE Exploit via Log Poisoning
Python3 exploit for CVE-2024-2053 (Artica Proxy)
📝 Description
This Python3 script exploits Local File Inclusion (LFI) vulnerabilities to achieve Remote Code Execution (RCE) through log poisoning techniques. Specifically designed for Artica Proxy (CVE-2024-2053) but adaptable to other LFI scenarios.
⚡ Features
Multiple LFI test vectors (/etc/passwd, /proc/self/environ)
4 different PHP payload variants for evasion
Automatic webshell deployment
Proxy support (Burp/OWASP ZAP)
SSL verification toggle
Verbose debugging mode
🛠️ Installation
git clone https://github.com/yourusername/artica-lfi-rce.git
cd artica-lfi-rce
pip3 install -r requirements.txt
🚀 Usage
python3 artica.py <target_url> <endpoint> [options]
Basic:
python3 artica.py http://vulnerable.com /images.listener.php
With proxy:
python3 artica.py https://target.com:9000 /vuln.php -p http://127.0.0.1:8080
Verbose mode:
python3 artica.py http://victim.com /endpoint.php -v
Ignore SSL errors:
python3 artica.py https://self-signed.com /path.php --no-verify
🎯 Technical Details
Component
Description
Payloads
File writer (file_put_contents)
Base64 decoder variant
Compact function caller
Injection Points
User-Agent, Referer, Cookies, GET parameters
Webshell
Randomized filename (shell_[TIMESTAMP].php)
⚠️ Legal Disclaimer
This tool is provided for educational and authorized penetration testing purposes only. The developer assumes no liability and is not responsible for any misuse or damage caused by this program.
📜 License
MIT License - Copyright (c) 2024