Sploitus

Exploit for CVE-2023-22527

kitploit · 2026-09-03

Exploit Code

MARKDOWN43 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-REVOLTSECURITIES-CVE-2023-22527
# CVE-2023-22527

Инструмент эксплуатации для атаки на серверы Confluence, уязвимые к CVE-2023-22527, что приводит к RCE. Протестировано и подтверждено POC на уязвимых экземплярах Confluence Data Center и серверов. С помощью этого инструмента атакующий может выполнить произвольный код на уязвимом экземпляре

### Установка:

root@kitploit:~
    
    
    git clone https://github.com/sanjai-AK47/CVE-2023-22527.git
    cd CVE-2023-22527
    pip install -r requirements.txt
    python3 exploit.py -h
    

### Использование:

root@kitploit:~
    
    
    python3 exploit.py -h                                                                         
    usage: exploit.py [-h] [-d DOMAIN] [-dL DOMAINS_LIST] [-cmd COMMAND] [-c CONCURRENCY] [-o OUTPUT] [-to TIME_OUT] [-px PROXY] [-v]
    
    [DESCTIPTION]: Exploitation and Detection tool for Cisco CVE-2023-46747
    
    options:
      -h, --help            show this help message and exit
      -d DOMAIN, --domain DOMAIN
                            [INFO]: Target domain for exploiting without protocol eg:(www.domain.com)
      -dL DOMAINS_LIST, --domains-list DOMAINS_LIST
                            [INFO]: Targets domain for exploiting without protocol eg:(www.domain.com)
      -cmd COMMAND, --command COMMAND
                            [INFO]: Give your burp collabarator url for exploitation
      -c CONCURRENCY, --concurrency CONCURRENCY
                            [INFO]: Give your burp collabarator url for exploitation
      -o OUTPUT, --output OUTPUT
                            [INFO]: File name to save output
      -to TIME_OUT, --time-out TIME_OUT
                            [INFO]: Switiching timeout will requests till for your timeout and also for BURPSUITE
      -px PROXY, --proxy PROXY
                            [INFO]: Switiching proxy will send request to your configured proxy (eg: BURPSUITE)
      -v, --verbose         [INFO]: Switiching Verbose will shows offline targets