CVE-2018-16167

This exploit targets CVE-2018-16167 in LogonTracer 1.2.0, achieving unauthenticated remote code execution by injecting a reverse shell payload into the 'timezone' parameter of the /upload endpoint. The payload uses Python to spawn a shell and connect back to the attacker.

This is a functional exploit for CVE-2018-16167, targeting LogonTracer 1.2.0 and earlier. It achieves unauthenticated remote code execution by injecting a reverse shell payload into the 'timezone' parameter of the /upload endpoint.