Sploitus

Exploit for DolibabyPhp

CVE-2023-30253

kitploit · 2026-08-25

Exploit Code

MARKDOWN50 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ANDRIA-DEV-DOLIBABYPHP
# DolibabyPhp

Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253.

## Installation

Du kannst das Paket entweder aus dem PyPi-Repository mit `pip` installieren oder den Quellcode direkt von GitHub mit `git clone` klonen.

root@kitploit:~
    
    
    pip install dolibabyphp
    

## Verwendung

root@kitploit:~
    
    
    Usage: dolibabyphp [OPTIONS] TARGET_URL USERNAME PASSWORD COMMAND [ARGS]...
    
      This exploit will log into the Dolibarr web server at the specified target URL
      with the provided username and password. After that it will attempt to create
      a web page with a unique name. Once created, it will modify the web page to
      include the custom PHP code bypassing the sanitation check by not using only
      lowercase letters (e.g. PHP or pHp instead of php). There are multiple
      payloads to choose from After the payload has finished running, the web page
      will be deleted.
    
    Options:
      --site-name TEXT       Specify a name to use when creating a site on the
                             target. Defaults to UUIDv4.
      --page-name TEXT       Specify a name to use when creating a page on the
                             target. Defaults to UUIDv4.
      --page-title TEXT      Specify a title for the page. Defaults to the page
                             name.
      --proxy TEXT           Specify a proxy URL for use in all requests.
      -o, --output FILENAME  Specify a file path to output the results of the
                             payload to. Defaults to stdout.
      -h, --help             Show this message and exit.
    
    Commands:
      bash-reverse-shell     Spawns a bash shell on the victim machine and...
      cleanup                Runs the cleanup script on the target for given site...
      curl-pipe              Curl a file and pipe it to another command.
      custom-php-payload     Specify your own PHP payload to be run on the victim...
      custom-system-payload  Specify your own payload to be run via PHP system()...
      sftp                   SFTPs to the attacker machine, downloads the...
      wget                   Downloads the file at the specified URL to to the...