Sploitus

Exploit for CVE-2024-2961

kitploit · 2026-08-25

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-4WAYHANDSHAKE-CVE-2024-2961
# CVE-2024-2961

Использует CVE-2024-2961 для произвольного чтения файлов

## Использование

Используйте вместе с wrapwrap для максимальной эффективности.

root@kitploit:~
    
    
    usage: arbitrary-file-read.py [-h] -t TARGET -c CHAIN -ct CONTENT_TYPE [--prefix-len PREFIX_LEN] [--suffix-len SUFFIX_LEN]
    
    options:
      -h, --help            show this help message and exit
      -t TARGET, --target TARGET
                            The target URL (e.g. http://subdomain.vulnerable.tld) - Don't include any URL path component
      -c CHAIN, --chain CHAIN
                            The filepath of the chain file from wrapwrap (see: https://github.com/ambionics/wrapwrap)
      -ct CONTENT_TYPE, --content-type CONTENT_TYPE
                            The content type that your filter chain pretends to use
      --prefix-len PREFIX_LEN
                            The length of the PREFIX to remove from the file in the response. Ex to remove the "GIF89a\n" header use `--prefix-len 8
      --suffix-len SUFFIX_LEN
                            The length of the SUFFIX to remove from the file in the response
    

## Пример (загрузка gif)