Exploit for Path Traversal in Igniterealtime Openfire CVE-2023-32315

## https://sploitus.com/exploit?id=35FAD97A-5330-5A1B-93B1-9526E967A3A9
# CVE-2023-32315
Tool for CVE-2023-32315 exploitation.

## Features:
- Scans single or bulk targets from txt files
- Utilizes multiprocessing for faster scanning
- Automatic login capability

## Installation:
- Make sure you're in this repo's directory and have python3 installed
- Install required packages using:
  ```sh
  pip install -r requirements.txt
  ```
- Run the tool with the following command:
  ```sh
  python3 CVE-2023-32315.py
  ```

## Usage 
- For bulk targets 
  ```sh 
  python3 CVE-2023-32315.py --web-list sites.txt -p 10
  ```
- For single target 
  ```sh 
  python3 CVE-2023-32315.py -u http://127.0.0.1:9090
  ```

## Screenshots 
![Screenshot 2023-08-31 153909](https://github.com/gibran-abdillah/quiz-app/assets/70421698/7a9ea21d-b5ac-435b-abdf-4815eeb458f5)
![Screenshot 2023-08-31 154022](https://github.com/gibran-abdillah/quiz-app/assets/70421698/e98f9d02-b02a-4260-8395-f157c66529a2)


## References 
- https://codewithvamp.medium.com/cve-2023-32315-administration-console-authentication-bypass-c1429f8c4576
- https://github.com/miko550/CVE-2023-32315