Sploitus

Exploit for CVE-2024-36401 CVE-2024-34102 CVE-2024-36401

kitploit · 2026-08-25

Exploit Code

MARKDOWN59 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-REVOLTSECURITIES-CVE-2024-36401
# CVE-2024-36401: GeoServer Неаутентифицированное удаленное выполнение кода

Exploiter — инструмент для обнаружения и эксплуатации уязвимости GeoServer Unauthenticated Remote Code Execution CVE-2024-36401.

#  ![](https://assets.kitploit.com/production/public/readmes/20124/612d087eb19e4244fa685237b0e13ac13e198392ee8dbc54710066a03d5ffaa8.png)

  


### Установка

root@kitploit:~
    
    
    git clone https://github.com/RevoltSecurities/CVE-2024-36401.git
    cd CVE-2024-34102
    pip install -r requirements.txt
    python3 exploiter.py --help
    

### Создайте свою тестовую среду:

root@kitploit:~
    
    
    sudo docker-compose up -d # To start your vulnerable instance and locate to http://0.0.0.0:8080
    sudo docker-compose down # To stop your vulnerable instance.
    

### Использование:

root@kitploit:~
    
    
    python3 exploit.py -h                       
    
    
        ______     ____  __         _ ______         
       / ____/  __/ __ \/ /  ____  (_)_  __/__  _____
      / __/ | |/_/ /_/ / /  / __ \/ / / / / _ \/ ___/
     / /____>  </ ____/ /__/ /_/ / / / / /  __/ /    
    /_____/_/|_/_/   /_____|____/_/ /_/  \___/_/     
      
                        @RevoltSecurities
    
    [Description]: Vulnerability Detection and Exploitation tool for CVE-2024-36401
    
    options:
      -h, --help            show this help message and exit
      -u URL, --url URL     [INF]: Specify a URL or domain for vulnerability detection
      -l LIST, --list LIST  [INF]: Specify a list of URLs for vulnerability detection
      -t THREADS, --threads THREADS
                            [INF]: Number of threads for list of URLs
      -proxy PROXY, --proxy PROXY
                            [INF]: Proxy URL to send request via your proxy
      -v, --verbose         [INF]: Increases verbosity of output in console
      -o OUTPUT, --output OUTPUT
                            [INF]: Filename to save output of vulnerable target]