Reformat the repo to store all my PoCs and add CVE-2025-24893
This commit is contained in:
@@ -1,27 +1,11 @@
|
||||
# CVE-2023-23752 - Joomla Information Disclosure
|
||||
# PoCs
|
||||
|
||||
Yo, I needed to use this exploit in a HTB machine and the only other PoC I could find was written in ruby...
|
||||
This repo contains proof of concept exploits for vulnerabilities I've come across in pentests and CTFs. This goes without saying but I am not liable for any misuse of these scripts, please be responsible.
|
||||
|
||||
I didn't wanna mess with the ruby dependancies so I just re-wrote it in python "real quick".
|
||||
|
||||
---
|
||||
This is basically just a parser for the JSON returned by the open API endpoints, this can be replicated easily with CURL or a web browser by hitting the following endpoints:
|
||||
|
||||
#### User Info
|
||||
|
||||
`/api/index.php/v1/config/applicaton?public=true`
|
||||
|
||||
#### Config Info
|
||||
|
||||
`/api/index.php/v1/config/application?public=true"`
|
||||
|
||||
## Usage
|
||||
`python3 CVE-2023-23752.py -t <target_url>`
|
||||
|
||||
---
|
||||
|
||||
# Exploits
|
||||
- [CVE-2023-23752](https://github.com/0xVoodoo/PoCs/CVE-2023-23752) - Information disclosure in Joomla CMS.
|
||||
- [CVE-2025-24893](https://github.com/0xVoodoo/PoCs/CVE-2025-24893) - RCE in XWiki.
|
||||
|
||||
# License
|
||||
GPL v3.0 - as all good software should be
|
||||
|
||||
Remember - don't be a skid :)
|
||||
GPLv3 as all good software (or exploits I guess) should be.
|
||||
|
||||
Reference in New Issue
Block a user