CVE-2018-1207

This exploit targets CVE-2018-1207, an unauthenticated file upload vulnerability in Dell EMC iDRAC7/iDRAC8. It includes a checker and an exploit to add a webadmin user via a precompiled payload.

This exploit targets a CGI injection vulnerability in Dell EMC iDRAC7/iDRAC8 firmware versions prior to 2.52.52.52 (CVE-2018-1207). It generates a shared object payload using a cross-compiler, uploads it to the vulnerable device, and triggers execution via LD_PRELOAD to achieve remote code execution as root.

This repository contains a functional Python exploit for CVE-2018-1207, targeting Dell iDRAC7/iDRAC8 devices with firmware versions prior to 2.52.52.52. The exploit leverages LD_PRELOAD to execute a reverse shell payload as root by uploading a malicious shared object file.

This repository contains a functional Python exploit for CVE-2018-1207, targeting Dell iDRAC7/iDRAC8 devices with firmware versions below 2.52.52.52. The exploit achieves remote code execution (RCE) as root by leveraging LD_PRELOAD to load a malicious shared object file, resulting in a reverse shell.