Exploit for Improper Input Validation in Paloaltonetworks Pan-Os CVE-2024-3400

## https://sploitus.com/exploit?id=323BE0FF-5CB3-57BE-91D9-99070B806D3D
# CVE-2024-3400

CVE-2024-3400 Palo Alto 
File Write Exploit


**This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400**

**[ Use with Caution ]**

**[ Made with educational Purpouses only ]**

Usage:
```
chmod +x gp-exploit.sh

./gp-exploit.sh file_name_to_write urls.txt
```

![Test Image 4](https://github.com/ak1t4/CVE-2024-3400/blob/main/front.png)


Shodan Search & Url's filtering:
```
# shodan search --fields ip_str,port 'http.html:"Global Protect"' --separator ":" | sed 's/.$//' > gp.hosts
# httpx -l gp.hosts 
# ./gp-exploit file_name gp.hosts
```
Status Code Reponses Verification:

![Test Image 5](https://github.com/ak1t4/CVE-2024-3400/blob/main/responses.jpg)