CVE-2023-38646 PoC — Metabase 安全漏洞

Source

Associated Vulnerability

Description

Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only.

Readme

# CVE-2023-38646-PoC-Metabase
Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only.

## Description
This is a Python-based Proof-of-Concept (PoC) script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfigurations to achieve remote command execution. 

⚠️ **Disclaimer**:  
This script is intended solely for educational purposes and ethical research. Misuse of this script to attack systems without prior consent is illegal and unethical. The author is not responsible for any damage caused by the use of this tool.

## Features
- Retrieves session tokens automatically
- Generates payloads for remote command execution
- Automates exploit deployment

## Requirements
- Python 3.7+
- `requests` library (`pip install requests`)

## Usage
- Make sure to listen on port with nc first.
```bash
python3 exploit.py -u <target_url> -ip <your_ip> -p <your_port>

File Snapshot

 [4.0K]  /data/pocs/55fbaf56706205544750911cd5beca0ef83f885b
├── [1.0K]  LICENSE
├── [3.1K]  metabase_exploit.py
└── [ 953]  README.md

0 directories, 3 files

Remarks