CVE-2024-9465 PoC — Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure

Source

Associated Vulnerability

Description

CVE-2024-9465 Proof of Concept

Readme

# CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.

## Affected Versions
From 1.2.0 (including) to 1.2.96 (excluding)

## Prerequisites
Before running the script, make sure you have:
- Python 3.x installed on your system.
- [sqlmap](https://sqlmap.org/) installed on your system
- And run `pip install -r requirements.txt` to make sure the depndecies are satisfied.

## Usage
```bash
python3 CVE-2024-9465.py -u https://target.com
```

## Disclaimer
This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by this tool.

## License

This project is licensed under the MIT License.

File Snapshot

 [4.0K]  /data/pocs/54f9d1a89c74788f73bb3c92f1de084feba27157
├── [2.5K]  CVE-2024-9465.py
├── [1.0K]  LICENSE
├── [1.1K]  README.md
└── [  25]  requirments.txt

0 directories, 4 files

Remarks