## https://sploitus.com/exploit?id=832C5CB4-AEED-5AD8-A555-5D7F2FF31CAB
This is a PoC exploit for CVE-2015-0235, a vulnerability in the GNU C Library (glibc) that allows for remote code execution (RCE) through a buffer overflow in the gethostbyname() function. The exploit is implemented in the kadimus tool, which is a LFI (Local File Inclusion) scanner and exploit tool.
The target of the exploit is the glibc library, specifically the gethostbyname() function, which is used to resolve hostnames to IP addresses. The vulnerability allows an attacker to inject malicious code into the glibc library, which can then be executed by the target system.
The kadimus tool uses a variety of techniques to exploit the vulnerability, including:
LFI scanning to identify vulnerable systems
RCE through the gethostbyname() function
PHP filter bypass to execute malicious code
HTTP shell to establish a command shell on the target system
The exploit is implemented in the src/fun/exec-cmd.c and src/fun/exec-php-code.c files, which contain the code for the RCE and PHP filter bypass techniques. The kadimus tool is compiled using the Makefile in the root directory of the repository.
The kadimus tool is designed to be used for testing and research purposes only, and should