CVE-2024-23692 PoC — Rejetto HTTP File Server 2.3m Unauthenticated RCE

Source

https://github.com/BBD-YZZ/CVE-2024-23692

Associated Vulnerability

Title:Rejetto HTTP File Server 2.3m Unauthenticated RCE (CVE-2024-23692)
Description:Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

Description

CVE-2024-23692

Readme

## CVE-2024-23692

#### Usage: go run hfs.go -h
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/0.PNG)

#### go run hfs.go -u http://127.0.0.1
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/1.png)

#### go run hfs.go -u http://127.0.0.1 -dns  //默认使用ceye.io(需配置)
#### go run hfs.go -u http://127.0.0.1 -dns -d abc.cn  //指定dnslog
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/2.png)

#### go run hfs.go -u http://127.0.0.1 -cmd  //进入命令行
![1](https://github.com/BBD-YZZ/CVE-2024-23692/blob/master/img/3.PNG)

*Tips: DNSLOG检测默认使用ceye.io, 如需使用请配置config目录下config.ini配置文件*

*未打包exe,可自行打包*

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!