CVE-2019-13024

This script is a brute-force tool for Centreon API 19.04.0, targeting the authentication endpoint to discover valid credentials. It does not exploit CVE-2019-13024 but instead performs credential brute-forcing.

This exploit targets Centreon v19.04 by leveraging authenticated RCE via poller configuration manipulation. It injects a reverse shell payload into the 'nagios_bin' parameter and triggers execution by generating configuration files.

This repository contains a functional Python exploit for CVE-2019-13024, an authenticated remote code execution vulnerability in Centreon v19.04. The exploit authenticates to the target, retrieves CSRF tokens, injects a malicious payload into the poller configuration, and triggers execution via XML generation.

This repository contains a functional Python exploit for CVE-2019-13024, targeting Centreon versions before 19.04.3. The exploit authenticates to the Centreon web interface, injects a malicious command into the poller configuration, and triggers its execution via XML generation.