CVE-2024-28995 PoC — SolarWinds Serv-U L Directory Transversal Vulnerability

Source

https://github.com/gotr00t0day/CVE-2024-28995

Associated Vulnerability

Title:SolarWinds Serv-U L Directory Transversal Vulnerability (CVE-2024-28995)
Description:SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Description

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Readme

# CVE-2024-28995
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. 

## INSTALL

git clone https://github.com/gotr00t0day/CVE-2024-28995.git

cd CVE-2024-28995

pip3 install -r requirements.txt

## USAGE

Scan a single target
```
python3 CVE-2024-28995.py -t domain.com
```

Scan a list of domains
```
python3 CVE-2024-28995.py -f domains.txt
```

## ANALYSIS

https://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis

File Snapshot


 [4.0K]  /data/pocs/ddbede125816f64598196f4acabef43da8ac3658
├── [2.9K]  CVE-2024-28995.py
├── [ 527]  README.md
└── [  26]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!