# CVE-2024-4577: PHP CGI Argument Injection (XAMPP) ๐Ÿ’€

## Features โœจ

- Multi-threaded scanning
- Single URL or bulk URL checks from a file
- Interactive exploitation shell

## Installation ๐Ÿ’ป

Get started by cloning the repository and installing dependencies:

git clone
cd CVE-2024-4577
pip install -r requirements.txt

## Usage ๐Ÿ”‘

Run CVE-2024-4577 with these examples:

# Test a single URL
python --url ""

# Test multiple URLs from a file
python --file urls.txt

# Save vulnerable URLs
python --file urls.txt --output vulnerable_urls.txt

## Ethical Disclaimer โš ๏ธ

This tool is intended for ethical security testing only. Using it without authorization is illegal and unethical. Users are responsible for adhering to all relevant laws.

## Personal Note on Public Disclosure ๐Ÿ“˜

I released my code publicly to address the irresponsible ways critical vulnerabilities are often disclosed. People have already shared the correct method to exploit this vulnerability, but many are still publishing flawed or fabricated exploits for attention. Additionally, media outlets tend to create unnecessary fear by broadcasting incorrect or unverified claims. This misleads everyone from the people who need to patch systems to researchers, and it negatively impacts the defensive side of cybersecurity. The lack of accuracy and accountability in these practices is very troubling to me.