Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

CVE-2024-3400 PoC — PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

Source
Associated Vulnerability
Title:PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect (CVE-2024-3400)
Description:A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
Readme
This repo contains a script to set up the safe environment for exploitation and a script that is responsible for carrying out the exploitation stages of:
# CVE-2024-3400

# Palo Alto Firewall Test Environment

This repository provides a shell script that allows you to quickly set up a test environment for the Palo Alto firewall with the necessary configuration to test an exploit.

## Requirements

- Docker installed on your system.
- Internet connection to download the Palo Alto firewall container image.

## Usage Instructions

1. Clone this repository to your local machine:

```bash
git clone https://github.com/your-user/paloalto-test-environment.git
```

2. Navigate to the repository directory:

```bash
cd paloalto-test-environment
```

3. Run the shell script to configure the environment:

```bash
./configure_environment.sh
```

This script will perform the following actions:

- Create a Docker network for the environment.
- Run a container for the Palo Alto firewall.
- Configure firewall rules.
- Set up network segmentation.
- Implement authentication and authorization.
- Configure the intrusion detection system.
- Monitor and audit network traffic.
- Display information about the firewall version and status.

Note: Make sure to run the script with superuser privileges or execute permission.

## Additional Notes

- The script may take a few minutes to complete as it downloads the Palo Alto firewall container image and performs the necessary configurations.
- Once the environment is set up, you can use the `exploit.py` script to test an exploit on the Palo Alto firewall. Make sure to provide the firewall's IP address as an argument to the script.

## Contributions

Contributions are welcome. If you encounter any issues or have any suggestions for improvement, feel free to open an issue or submit a pull request.

## License

This project is licensed under the [GNU License](LICENSE).

---
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →