CVE-2023-25581 PoC — Deserialization of untrusted data in InternalAttributeHandler in pac4j

Source

Associated Vulnerability

Readme

This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code (RCE) by deserializing maliciously crafted Base64-encoded data.
Prerequisites

Before running the script, make sure you have the following installed:

    Python 3.x: Download Python

    requests library: Install it by running the command:

    bash

    pip install requests

Usage

    Clone the Repository:

    Clone this repository to your local machine:

    bash

git clone https://github.com/p33d/CVE-2023-25581
cd CVE-2023-25581

Run the Exploit Script:

To run the script, use the following command in your terminal:

bash

python3 Poc-CVE-2023-25581.py

Input the Target URL:

After running the script, you will be prompted to enter the target URL of the vulnerable application. For example:

bash

Enter the target URL (e.g., http://vulnerable-app.com/api/profile): http://vulnerable-app.com/api/profile

Payload Execution:

If the target is vulnerable, the script will send a payload and attempt to exploit the system. If successful, you may achieve remote code execution (RCE). The script will print the following message if the exploit is successful:

bash

Payload sent successfully! Check your terminal for RCE.

If the exploit fails or the target is not vulnerable, an error message will be displayed.

File Snapshot

 [4.0K]  /data/pocs/497a8df1e0b1fcf80c42c0433d6204e44e5aa2c8
├── [1.0K]  Poc-CVE-2023-25581.py
└── [1.4K]  README.md

0 directories, 2 files

Remarks