CVE-2020-14295

Proof of Concept for CVE-2020-14295.

CVE-2020-14295 CVE-2020-14295 proof of concept The original post can be found at exploit-db Install requirements python3 -m pip install -r requirementstxt Usage $ python3 cacti_sqli_rcepy --help usage: cacti_sqli_rcepy [-h] -t <target/host URL> -u <user> -p <password>

HackTheBox-Monitors Writeup RFI-SQLi-Deserialization-DockerEscape Synopsis “Monitors” is marked as hard difficulty linux machine that features Apache service hosting Wordpress website The HTML source reveals a Wordpress plugin that is vulnerable to RFI (Remote File Inclusion) Using this vulnerability we read configuration file of Wordpress and apache, the former

Authenticated SQL injection to command execution on Cacti 1.2.12

CVE-2020-14295 Vulnerability details - Cacti/cacti#3622 Install pip3 install -r requirementstxt Usage $ /gimme-a-shellpy --help usage: gimme-a-shellpy [-h] -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show this help message and exit required arguments: -t Target Target URL -U Username Cacti username -P Pas