CVE-2023-43364 PoC — Searchor 安全漏洞

Source

https://github.com/libertycityhacker/CVE-2023-43364-Exploit-CVE

Associated Vulnerability

Title:Searchor 安全漏洞 (CVE-2023-43364)
Description:main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

Readme

# CVE-2023-43364-Exploit-CVE
This is a python script to exploit Searchor 2.4.0 - the eval() function was implemented insecurely and can be exploited for RCE.

This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another reverse shell if you need to use something other than busybox.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →