CVE-2023-30990 PoC — IBM i command execution

Description

CVE-2023-30990 exploits

Readme

# CVE-2023-30990 exploits

See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/

The Python scripts require the ebcdic module: `pip install ebcdic`


### DRDA S38CMD method

```bash
python3 ddm.py <IP> "<CL COMMAND>"
```

### DRDA SQL method

```bash
python3 ddm-bypass-test.py <IP> "<CL COMMAND>"
```

### Simple bindshell with S38CMD method

```bash
./exploit.sh <IP>
```

File Snapshot

Remarks