Sploitus

Exploit for CVE-2023-38646

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SECUREZERON-CVE-2023-38646
# Metabase: RCE Π΄ΠΎ Π°ΡƒΡ‚Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ†ΠΈΠΈ (CVE-2023-38646)

ΠœΡ‹ прСдоставили Π΄Π²Π° Ρ„Π°ΠΉΠ»Π°:-

  * CVE-2023-38646-POC.py для ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ, ΡƒΡ‚Π΅ΠΊΠ°Π΅Ρ‚ Π»ΠΈ setup-token ΠΈΠ· ΠΊΠ°ΠΊΠΎΠ³ΠΎ-Π»ΠΈΠ±ΠΎ экзСмпляра Metabase.
  * CVE-2023-38646-Reverse-Shell.py для получСния ΠΎΠ±Ρ€Π°Ρ‚Π½ΠΎΠΉ ΠΎΠ±ΠΎΠ»ΠΎΡ‡ΠΊΠΈ Π½Π° машинС, ΠΊΠΎΠ½Ρ‚Ρ€ΠΎΠ»ΠΈΡ€ΡƒΠ΅ΠΌΠΎΠΉ Π°Ρ‚Π°ΠΊΡƒΡŽΡ‰ΠΈΠΌ.



* * *

## CVE-2023-38646-POC.py

![ΠŸΡ€ΠΎΠ²Π΅Ρ€ΠΊΠ°](https://assets.kitploit.com/production/public/readmes/32128/9045cb12c7c41a9f616b42f4acf1b0fa66bd1d53e7a05231dd0c9374f79a60ba.png)

* * *

## CVE-2023-38646-Reverse-Shell.py

![Reverse_Shell1](https://assets.kitploit.com/production/public/readmes/32128/1429d0f601b4c410808d25c81f834fb91c8b5dde362f60b5b3aba0dec5e225d5.png)

* * *

## Как ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚ΡŒ

root@kitploit:~
    
    
    git clone https://github.com/securezeron/CVE-2023-38646
    cd CVE-2023-38646
    pip install -r requirements.txt
    python3 CVE-2023-38646-Reverse-Shell.py -h