CVE-2019-15029

This exploit targets FusionPBX v4.4.8 by authenticating with provided credentials, creating a malicious service with a reverse shell payload, and triggering it to execute arbitrary commands. The payload uses a named pipe and netcat to establish a reverse shell.

The repository contains a functional exploit for CVE-2019-15029, demonstrating authenticated remote code execution in FusionPBX v4.4.8 by injecting a malicious command into the service_edit.php file and triggering it via services.php. It includes both a Python script and a Metasploit module.