CVE-2018-8097

This is a Python-based Proof of Concept for CVE-2018-8097, which exploits a command injection vulnerability in PyEve versions < 0.7.5 via the 'where' filter parameter. The script constructs a malicious payload using Python's __import__ function to execute arbitrary system commands.

This is a functional Python-based PoC for CVE-2018-8097, exploiting a Python code injection vulnerability in Eve (a REST API framework) to perform blind file exfiltration via time-based side-channel attacks. It uses MongoDB ObjectId injection and a delay-based technique to extract file contents character by character.